@authhero/kysely-adapter 12.0.0 → 12.2.0

package/dist/kysely-adapter.mjs

@@ -1,18 +1,18 @@
 import { customAlphabet as e, nanoid as t } from "nanoid";
 import { booleanToInt as n, convertDatesToAdapter as r, dbDateToIso as i, dbDateToIsoRequired as a, getCountAsInt as o, isoToDbDate as s, nowIso as c, removeNullProperties as l, removeUndefinedAndNull as u, stringifyProperties as d } from "@authhero/adapter-interfaces/sql";
 import { sql as f } from "kysely";
-import { LoginSessionState as p, clientGrantSchema as m, clientRegistrationTokenTypeSchema as h, codeSchema as g, decodeCursor as _, emailTemplateSchema as v, encodeCursor as y, flowSchema as b, formSchema as x, handlerConfigSchema as ee, isPlainObject as te, loginSessionSchema as ne, matchSchema as re, migrationProviderTypeSchema as ie, parseUserId as ae, resourceServerSchema as oe, rolloutInsertSchema as se, rolloutSchema as ce, sanitizeLuceneQuery as S, tenantOperationEventInsertSchema as le, tenantOperationEventSchema as ue, tenantOperationInsertSchema as de, tenantOperationSchema as fe } from "@authhero/adapter-interfaces";
+import { LoginSessionState as p, clientGrantSchema as m, clientRegistrationTokenTypeSchema as h, codeSchema as g, decodeCursor as _, emailTemplateSchema as v, encodeCursor as y, flowSchema as b, formSchema as x, handlerConfigSchema as ee, isPlainObject as te, loginSessionSchema as ne, matchSchema as re, migrationProviderTypeSchema as ie, parseUserId as ae, resourceServerSchema as oe, rolloutInsertSchema as se, rolloutSchema as ce, sanitizeLuceneQuery as S, scimMappingEntrySchema as le, tenantOperationEventInsertSchema as ue, tenantOperationEventSchema as de, tenantOperationInsertSchema as fe, tenantOperationSchema as pe } from "@authhero/adapter-interfaces";
 import { HTTPException as C } from "hono/http-exception";
 import "@hono/zod-openapi";
-import { Migrator as pe } from "kysely/migration";
+import { Migrator as me } from "kysely/migration";
 //#region \0rolldown/runtime.js
-var me = Object.defineProperty, he = (e, t) => {
+var he = Object.defineProperty, w = (e, t) => {
 	let n = {};
-	for (var r in e) me(n, r, {
+	for (var r in e) he(n, r, {
 		get: e[r],
 		enumerable: !0
 	});
-	return t || me(n, Symbol.toStringTag, { value: "Module" }), n;
+	return t || he(n, Symbol.toStringTag, { value: "Module" }), n;
 }, ge = 17, _e = {
 	organization: "org_",
 	connection: "con_",
@@ -25,33 +25,33 @@ var me = Object.defineProperty, he = (e, t) => {
 	guardian_factor: "gfa_",
 	invite: "inv_"
 };
-function w(t) {
+function T(t) {
 	let n = e("0123456789abcdefghijklmnopqrstuvwxyz", ge)();
 	return `${_e[t]}${n}`;
 }
 function ve() {
-	return w("organization");
+	return T("organization");
 }
 function ye() {
-	return w("connection");
+	return T("connection");
 }
 function be() {
-	return w("action");
+	return T("action");
 }
 function xe() {
-	return w("action_version");
+	return T("action_version");
 }
 function Se() {
-	return w("hook");
+	return T("hook");
 }
 function Ce() {
-	return w("resource_server");
+	return T("resource_server");
 }
 function we() {
-	return w("hook_code");
+	return T("hook_code");
 }
 function Te() {
-	return w("invite");
+	return T("invite");
 }
 //#endregion
 //#region src/actions/create.ts
@@ -91,7 +91,7 @@ function Ee(e) {
 }
 //#endregion
 //#region src/actions/get.ts
-function T(e) {
+function E(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
@@ -113,9 +113,9 @@ function De(e) {
 			runtime: m.runtime ?? void 0,
 			status: m.status || "built",
 			deployed_at: s ? new Date(Number(s)).toISOString() : void 0,
-			secrets: T(c),
-			dependencies: T(l),
-			supported_triggers: T(u),
+			secrets: E(c),
+			dependencies: E(l),
+			supported_triggers: E(u),
 			is_system: !!d,
 			inherit: !!f
 		};
@@ -126,10 +126,10 @@ function De(e) {
 function Oe(e) {
 	return f`coalesce(${f.ref(e.column)}, ${f.lit(e.defaultValue)})`;
 }
-function E(e) {
+function D(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function D(e, t, n, r, i = [], a = {}) {
+function O(e, t, n, r, i = [], a = {}) {
 	let o = new Set(i), { ref: s } = e.dynamic, c = (e) => {
 		let t = a[e];
 		return t === void 0 ? e : typeof t == "string" ? t : t.column;
@@ -148,7 +148,7 @@ function D(e, t, n, r, i = [], a = {}) {
 			if (n) {
 				let [, t, r] = n;
 				if (!t || !r) return null;
-				let i = t.trim(), a = E(r.replace(/^"(.*)"$/, "$1").trim());
+				let i = t.trim(), a = D(r.replace(/^"(.*)"$/, "$1").trim());
 				return o.has(i) ? e(s(c(i)), "like", `%${a}%`) : e(l(i), "=", u(i, a));
 			}
 			return null;
@@ -166,8 +166,8 @@ function D(e, t, n, r, i = [], a = {}) {
 		else if (e.startsWith("_exists_:")) n = e.substring(9), i = !0, t = !1;
 		else if (e.includes(":")) {
 			let o = t ? e.substring(1) : e, s = o.indexOf(":");
-			n = o.substring(0, s), r = o.substring(s + 1), i = !1, r.startsWith(">=") ? (a = ">=", r = r.substring(2)) : r.startsWith(">") ? (a = ">", r = r.substring(1)) : r.startsWith("<=") ? (a = "<=", r = r.substring(2)) : r.startsWith("<") ? (a = "<", r = r.substring(1)) : a = "=", r.startsWith("\"") && r.endsWith("\"") && r.length > 1 && (r = r.slice(1, -1)), r = E(r);
-		} else n = null, r = E(e), i = !1;
+			n = o.substring(0, s), r = o.substring(s + 1), i = !1, r.startsWith(">=") ? (a = ">=", r = r.substring(2)) : r.startsWith(">") ? (a = ">", r = r.substring(1)) : r.startsWith("<=") ? (a = "<=", r = r.substring(2)) : r.startsWith("<") ? (a = "<", r = r.substring(1)) : a = "=", r.startsWith("\"") && r.endsWith("\"") && r.length > 1 && (r = r.slice(1, -1)), r = D(r);
+		} else n = null, r = D(e), i = !1;
 		return {
 			key: n,
 			value: r,
@@ -201,7 +201,7 @@ function D(e, t, n, r, i = [], a = {}) {
 }
 //#endregion
 //#region src/actions/list.ts
-function O(e) {
+function k(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
@@ -211,7 +211,7 @@ function O(e) {
 function ke(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, q: c } = n, l = e.selectFrom("actions").where("actions.tenant_id", "=", t);
-		c && (l = D(e, l, c, ["name"]));
+		c && (l = O(e, l, c, ["name"]));
 		let u = (await l.offset(i * a).limit(a).selectAll().execute()).map((e) => {
 			let { created_at_ts: n, updated_at_ts: i, deployed_at_ts: a, secrets: o, dependencies: s, supported_triggers: c, is_system: l, inherit: u, tenant_id: d, ...f } = e, p = r({
 				created_at_ts: n,
@@ -224,9 +224,9 @@ function ke(e) {
 				runtime: f.runtime ?? void 0,
 				status: f.status || "built",
 				deployed_at: a ? new Date(Number(a)).toISOString() : void 0,
-				secrets: O(o),
-				dependencies: O(s),
-				supported_triggers: O(c),
+				secrets: k(o),
+				dependencies: k(s),
+				supported_triggers: k(c),
 				is_system: !!l,
 				inherit: !!u
 			};
@@ -341,36 +341,64 @@ function Ie(e) {
 	};
 }
 //#endregion
+//#region src/actionExecutions/cleanup.ts
+var A = 5e4;
+async function Le(e) {
+	try {
+		return await f`SELECT VERSION()`.execute(e), "mysql";
+	} catch {
+		return "sqlite";
+	}
+}
+function Re(e) {
+	let t;
+	return async (n) => {
+		let r = Date.parse(n);
+		if (Number.isNaN(r)) throw Error(`Invalid olderThan date: ${n}`);
+		if (t ??= await Le(e), t === "sqlite") {
+			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).executeTakeFirst();
+			return Number(t.numDeletedRows);
+		}
+		let i = 0, a = A;
+		for (; a >= A;) {
+			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).limit(A).executeTakeFirst();
+			a = Number(t.numDeletedRows), i += a;
+		}
+		return i;
+	};
+}
+//#endregion
 //#region src/actionExecutions/index.ts
-function Le(e) {
+function ze(e) {
 	return {
 		create: Pe(e),
-		get: Ie(e)
+		get: Ie(e),
+		cleanup: Re(e)
 	};
 }
 //#endregion
 //#region src/actionVersions/index.ts
-function k(e) {
+function j(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function Re(e) {
+function Be(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, dependencies: i, supported_triggers: a, deployed: o, runtime: s, ...c } = e;
 	return {
 		...c,
 		runtime: s ?? void 0,
 		deployed: !!o,
-		secrets: k(r),
-		dependencies: k(i),
-		supported_triggers: k(a),
+		secrets: j(r),
+		dependencies: j(i),
+		supported_triggers: j(a),
 		created_at: new Date(Number(t)).toISOString(),
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function ze(e) {
+function Ve(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? xe(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
@@ -410,10 +438,10 @@ function ze(e) {
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n).where("id", "=", r).selectAll().executeTakeFirst();
-			return i ? Re(i) : null;
+			return i ? Be(i) : null;
 		},
 		async list(t, n, r = {}) {
-			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(Re);
+			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(Be);
 			if (!s) return {
 				versions: l,
 				start: 0,
@@ -436,7 +464,7 @@ function ze(e) {
 }
 //#endregion
 //#region src/outbox/create.ts
-async function A(e, t, n, r) {
+async function M(e, t, n, r) {
 	await e.insertInto("outbox_events").values({
 		id: n,
 		tenant_id: t,
@@ -455,15 +483,15 @@ async function A(e, t, n, r) {
 		error: null
 	}).execute();
 }
-function Be(e) {
+function He(e) {
 	return async (n, r) => {
 		let i = t();
-		return await A(e, n, i, r), i;
+		return await M(e, n, i, r), i;
 	};
 }
 //#endregion
 //#region src/users/create.ts
-function Ve(e) {
+function Ue(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, { identities: o, phone_verified: s, password: c, last_login: l, last_ip: u, login_count: d, ...f } = r, p = (/* @__PURE__ */ new Date()).toISOString(), m = {
 			...f,
@@ -474,6 +502,7 @@ function Ve(e) {
 			email_verified: +!!r.email_verified,
 			phone_verified: s === void 0 ? null : +!!s,
 			is_social: +!!r.is_social,
+			blocked: +!!r.blocked,
 			app_metadata: JSON.stringify(r.app_metadata),
 			user_metadata: JSON.stringify(r.user_metadata),
 			address: r.address ? JSON.stringify(r.address) : null
@@ -497,7 +526,7 @@ function Ve(e) {
 				};
 				await e.insertInto("passwords").values(r).execute();
 			}
-			for (let t of i?.outboxEvents ?? []) await A(e, n, t.id, t);
+			for (let t of i?.outboxEvents ?? []) await M(e, n, t.id, t);
 		};
 		try {
 			e.isTransaction ? await h(e) : await e.transaction().execute(h);
@@ -513,6 +542,7 @@ function Ve(e) {
 			email_verified: m.email_verified === 1,
 			phone_verified: m.phone_verified === null ? void 0 : m.phone_verified === 1,
 			is_social: m.is_social === 1,
+			blocked: m.blocked == null ? void 0 : m.blocked === 1,
 			app_metadata: r.app_metadata,
 			user_metadata: r.user_metadata,
 			address: r.address
@@ -521,21 +551,21 @@ function Ve(e) {
 }
 //#endregion
 //#region src/users/user-to-identity.ts
-var He = [
+var We = [
 	"email",
 	"email_verified",
 	"phone_number",
 	"phone_verified",
 	"username"
 ];
-function j(e, t = !1) {
+function N(e, t = !1) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
 		user_id: ae(e.user_id).id,
 		isSocial: !!e.is_social
 	};
-	for (let t of He) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
+	for (let t of We) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
 	if (!t) {
 		let t = {};
 		try {
@@ -553,7 +583,7 @@ function j(e, t = !1) {
 }
 //#endregion
 //#region src/users/get.ts
-function Ue(e) {
+function Ge(e) {
 	return async (t, n) => {
 		let [r, i] = await Promise.all([e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t).where("users.user_id", "=", n).selectAll("users").select([
 			"user_activity.last_login",
@@ -568,27 +598,28 @@ function Ue(e) {
 			email_verified: r.email_verified === 1,
 			phone_verified: r.phone_verified === null ? void 0 : r.phone_verified === 1,
 			is_social: r.is_social === 1,
+			blocked: r.blocked == null ? void 0 : r.blocked === 1,
 			last_login: r.last_login ?? void 0,
 			last_ip: r.last_ip ?? void 0,
 			login_count: r.login_count ?? 0,
 			app_metadata: JSON.parse(r.app_metadata),
 			user_metadata: JSON.parse(r.user_metadata),
 			address: r.address ? JSON.parse(r.address) : void 0,
-			identities: [j(r, !0), ...i.map((e) => j(e))]
+			identities: [N(r, !0), ...i.map((e) => N(e))]
 		});
 	};
 }
 //#endregion
 //#region src/helpers/paginate.ts
-function M(e) {
+function P(e) {
 	return e?.from !== void 0 || e?.take !== void 0;
 }
-function We(e, t) {
+function Ke(e, t) {
 	let n = typeof e == "number" && Number.isFinite(e) ? Math.floor(e) : NaN;
 	return n >= 1 ? n : t;
 }
-async function N(e, t, n) {
-	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = We(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? _(t.from) : null;
+async function F(e, t, n) {
+	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = Ke(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? _(t.from) : null;
 	if (c && c.k !== n.sortKey) throw new C(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
 	if (c) if (c.s === void 0 || c.s === null) s = s.where(f.ref(a), i === "asc" ? ">" : "<", c.i);
 	else {
@@ -612,7 +643,7 @@ async function N(e, t, n) {
 }
 //#endregion
 //#region src/users/list.ts
-var Ge = [
+var qe = [
 	"user_id",
 	"email",
 	"email_verified",
@@ -629,25 +660,26 @@ var Ge = [
 	"provider",
 	"connection",
 	"is_social",
+	"blocked",
 	"last_ip",
 	"last_login",
 	"login_count",
 	"created_at",
 	"updated_at"
-], Ke = new Set([
+], Je = new Set([
 	"last_login",
 	"last_ip",
 	"login_count"
-]), qe = Object.fromEntries(Ge.map((e) => [e, e === "login_count" ? {
+]), Ye = Object.fromEntries(qe.map((e) => [e, e === "login_count" ? {
 	column: "user_activity.login_count",
 	defaultValue: 0
-} : Ke.has(e) ? `user_activity.${e}` : `users.${e}`])), Je = [
+} : Je.has(e) ? `user_activity.${e}` : `users.${e}`])), Xe = [
 	"email",
 	"name",
 	"phone_number",
 	"user_id"
 ];
-async function Ye(e, t, n) {
+async function Ze(e, t, n) {
 	let r = n.map((e) => e.user_id), i = r.length ? await e.selectFrom("users").selectAll().where("users.tenant_id", "=", t).where("users.linked_to", "in", r).orderBy("created_at", "asc").execute() : [];
 	return n.map((e) => {
 		let t = i.filter((t) => t.linked_to === e.user_id);
@@ -656,24 +688,25 @@ async function Ye(e, t, n) {
 			email_verified: e.email_verified === 1,
 			phone_verified: e.phone_verified === null ? void 0 : e.phone_verified === 1,
 			is_social: e.is_social === 1,
+			blocked: e.blocked == null ? void 0 : e.blocked === 1,
 			login_count: e.login_count ?? 0,
 			app_metadata: JSON.parse(e.app_metadata),
 			user_metadata: JSON.parse(e.user_metadata),
 			address: e.address ? JSON.parse(e.address) : void 0,
-			identities: [j(e, !0), ...t.map((e) => j(e))]
+			identities: [N(e, !0), ...t.map((e) => N(e))]
 		});
 	});
 }
-function Xe(e) {
+function Qe(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t);
 		if (c) {
-			let t = S(c, Ge);
-			t && (l = D(e, l, t, Je, [], qe));
+			let t = S(c, qe);
+			t && (l = O(e, l, t, Xe, [], Ye));
 		}
-		if (M(n)) {
+		if (P(n)) {
 			if (s?.sort_by && s.sort_by !== "created_at") throw new C(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
-			let r = s?.sort_order === "asc" ? "asc" : "desc", { rows: i, limit: a, next: o } = await N(l.where("users.linked_to", "is", null).selectAll("users").select([
+			let r = s?.sort_order === "asc" ? "asc" : "desc", { rows: i, limit: a, next: o } = await F(l.where("users.linked_to", "is", null).selectAll("users").select([
 				"user_activity.last_login",
 				"user_activity.last_ip",
 				"user_activity.login_count"
@@ -682,7 +715,7 @@ function Xe(e) {
 				sortOrder: r,
 				idColumn: "users.user_id",
 				sortKey: `created_at:${r}`
-			}), c = await Ye(e, t, i);
+			}), c = await Ze(e, t, i);
 			return {
 				users: c,
 				start: 0,
@@ -692,13 +725,13 @@ function Xe(e) {
 			};
 		}
 		if (s && s.sort_by) {
-			let t = qe[s.sort_by];
+			let t = Ye[s.sort_by];
 			if (t) {
 				let { ref: n } = e.dynamic;
 				l = l.orderBy(typeof t == "string" ? n(t) : Oe(t), s.sort_order);
 			}
 		}
-		let u = await Ye(e, t, await l.offset(r * i).limit(i).selectAll("users").select([
+		let u = await Ze(e, t, await l.offset(r * i).limit(i).selectAll("users").select([
 			"user_activity.last_login",
 			"user_activity.last_ip",
 			"user_activity.login_count"
@@ -720,12 +753,12 @@ function Xe(e) {
 }
 //#endregion
 //#region src/users/remove.ts
-function Ze(e) {
+function $e(e) {
 	return async (t, n, r) => {
 		let i = async (e) => {
 			await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "in", (e) => e.selectFrom("users").select("users.user_id").where("users.tenant_id", "=", t).where((e) => e.or([e("users.user_id", "=", n), e("users.linked_to", "=", n)]))).execute(), await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.linked_to", "=", n).execute();
 			let i = await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
-			for (let n of r?.outboxEvents ?? []) await A(e, t, n.id, n);
+			for (let n of r?.outboxEvents ?? []) await M(e, t, n.id, n);
 			return i.length === 1;
 		};
 		return r?.outboxEvents?.length && !e.isTransaction ? e.transaction().execute(i) : i(e);
@@ -733,14 +766,14 @@ function Ze(e) {
 }
 //#endregion
 //#region src/utils/flatten.ts
-function P(e, t = "", n = {}) {
+function I(e, t = "", n = {}) {
 	for (let r in e) if (Object.prototype.hasOwnProperty.call(e, r)) {
 		let i = t ? `${t}_${r}` : r, a = e[r];
-		typeof a == "object" && a && !Array.isArray(a) ? P(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
+		typeof a == "object" && a && !Array.isArray(a) ? I(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
 	}
 	return n;
 }
-function Qe(e, t) {
+function et(e, t) {
 	let n = {};
 	for (let [r, i] of Object.entries(e)) {
 		let e = t.find((e) => r.startsWith(`${e}_`));
@@ -757,7 +790,7 @@ function Qe(e, t) {
 }
 //#endregion
 //#region src/userActivity/index.ts
-function $e(e) {
+function tt(e) {
 	return {
 		user_id: e.user_id,
 		last_login: e.last_login ?? void 0,
@@ -767,18 +800,18 @@ function $e(e) {
 		last_password_reset: e.last_password_reset ?? void 0
 	};
 }
-function et(e) {
+function nt(e) {
 	let t = {};
 	return e.last_login !== void 0 && (t.last_login = e.last_login), e.last_ip !== void 0 && (t.last_ip = e.last_ip), e.login_count !== void 0 && (t.login_count = e.login_count), e.failed_logins !== void 0 && (t.failed_logins = JSON.stringify(e.failed_logins)), e.last_password_reset !== void 0 && (t.last_password_reset = e.last_password_reset), t;
 }
-function tt(e) {
+function rt(e) {
 	return {
 		async get(t, n) {
 			let r = await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).selectAll().executeTakeFirst();
-			return r ? $e(r) : null;
+			return r ? tt(r) : null;
 		},
 		async upsert(t, n, r) {
-			let i = et(r);
+			let i = nt(r);
 			if (await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).select("user_id").executeTakeFirst()) {
 				if (Object.keys(i).length === 0) return;
 				await e.updateTable("user_activity").set(i).where("tenant_id", "=", t).where("user_id", "=", n).execute();
@@ -800,24 +833,25 @@ function tt(e) {
 }
 //#endregion
 //#region src/users/update.ts
-function nt(e) {
+function it(e) {
 	return async (t, n, r, i) => {
-		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = P({
+		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = I({
 			...c,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString(),
 			app_metadata: r.app_metadata ? JSON.stringify(r.app_metadata) : void 0,
 			user_metadata: r.user_metadata ? JSON.stringify(r.user_metadata) : void 0,
 			address: r.address ? JSON.stringify(r.address) : void 0,
-			phone_verified: r.phone_verified === void 0 ? void 0 : +!!r.phone_verified
+			phone_verified: r.phone_verified === void 0 ? void 0 : +!!r.phone_verified,
+			blocked: r.blocked === void 0 ? void 0 : +!!r.blocked
 		}), u = async (e) => {
 			let [r] = await e.updateTable("users").set(l).where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
 			if (!r || r.numUpdatedRows === 0n) return !1;
-			(a !== void 0 || o !== void 0 || s !== void 0) && await tt(e).upsert(t, n, {
+			(a !== void 0 || o !== void 0 || s !== void 0) && await rt(e).upsert(t, n, {
 				last_login: a,
 				last_ip: o,
 				login_count: s
 			});
-			for (let n of i?.outboxEvents ?? []) await A(e, t, n.id, n);
+			for (let n of i?.outboxEvents ?? []) await M(e, t, n.id, n);
 			return !0;
 		};
 		return e.isTransaction ? u(e) : e.transaction().execute(u);
@@ -825,26 +859,26 @@ function nt(e) {
 }
 //#endregion
 //#region src/users/unlink.ts
-function rt(e) {
+function at(e) {
 	return async (t, n, r, i) => (await e.updateTable("users").set({ linked_to: null }).where("users.tenant_id", "=", t).where("users.user_id", "=", `${r}|${i}`).where("users.linked_to", "=", `${n}`).execute()).length === 1;
 }
 //#endregion
 //#region src/users/index.ts
-function it(e) {
-	let t = Ve(e);
+function ot(e) {
+	let t = Ue(e);
 	return {
 		create: t,
 		rawCreate: t,
-		remove: Ze(e),
-		get: Ue(e),
-		list: Xe(e),
-		update: nt(e),
-		unlink: rt(e)
+		remove: $e(e),
+		get: Ge(e),
+		list: Qe(e),
+		update: it(e),
+		unlink: at(e)
 	};
 }
 //#endregion
 //#region src/flows/create.ts
-function at(e) {
+function st(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = b.parse({
 			id: a?.id ?? `af_${t()}`,
@@ -862,7 +896,7 @@ function at(e) {
 }
 //#endregion
 //#region src/helpers/parse.ts
-function F(e, t) {
+function L(e, t) {
 	if (!e) return t;
 	try {
 		return JSON.parse(e);
@@ -870,7 +904,7 @@ function F(e, t) {
 		return t;
 	}
 }
-function ot(e) {
+function ct(e) {
 	if (e) try {
 		let t = JSON.parse(e);
 		return t && typeof t == "object" && !Array.isArray(t) ? t : void 0;
@@ -878,33 +912,33 @@ function ot(e) {
 		return;
 	}
 }
-function st(e, t, n = { ...e }) {
-	for (let r in t) r in e && (n[r] = F(e[r], t[r]));
+function lt(e, t, n = { ...e }) {
+	for (let r in t) r in e && (n[r] = L(e[r], t[r]));
 	return n;
 }
 //#endregion
 //#region src/flows/get.ts
-function ct(e) {
+function ut(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("flows").selectAll().where("flows.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
 		let i = {
 			...r,
-			actions: F(r.actions, [])
+			actions: L(r.actions, [])
 		};
 		return b.parse(l(i));
 	};
 }
 //#endregion
 //#region src/flows/list.ts
-function lt(e) {
+function dt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("flows").where("tenant_id", "=", t);
-		s && (c = D(e, c, s, []));
+		s && (c = O(e, c, s, []));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let t = {
 				...e,
-				actions: F(e.actions, [])
+				actions: L(e.actions, [])
 			};
 			return b.parse(l(t));
 		});
@@ -925,7 +959,7 @@ function lt(e) {
 }
 //#endregion
 //#region src/flows/update.ts
-function ut(e) {
+function ft(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -943,27 +977,27 @@ function ut(e) {
 }
 //#endregion
 //#region src/flows/remove.ts
-function dt(e) {
+function pt(e) {
 	return async (t, n) => ((await e.deleteFrom("flows").where("id", "=", n).where("tenant_id", "=", t).execute())[0]?.numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/flows/index.ts
-function ft(e) {
+function mt(e) {
 	return {
-		create: at(e),
-		get: ct(e),
-		list: lt(e),
-		update: ut(e),
-		remove: dt(e)
+		create: st(e),
+		get: ut(e),
+		list: dt(e),
+		update: ft(e),
+		remove: pt(e)
 	};
 }
 //#endregion
 //#region src/tenants/utils.ts
-function pt(e) {
+function ht(e) {
 	let t = { ...e };
 	return e.session_cookie && typeof e.session_cookie == "string" && (t.session_cookie = JSON.parse(e.session_cookie)), e.enabled_locales && typeof e.enabled_locales == "string" && (t.enabled_locales = JSON.parse(e.enabled_locales)), e.error_page && typeof e.error_page == "string" && (t.error_page = JSON.parse(e.error_page)), e.flags && typeof e.flags == "string" && (t.flags = JSON.parse(e.flags)), e.sandbox_versions_available && typeof e.sandbox_versions_available == "string" && (t.sandbox_versions_available = JSON.parse(e.sandbox_versions_available)), e.change_password && typeof e.change_password == "string" && (t.change_password = JSON.parse(e.change_password)), e.guardian_mfa_page && typeof e.guardian_mfa_page == "string" && (t.guardian_mfa_page = JSON.parse(e.guardian_mfa_page)), e.sessions && typeof e.sessions == "string" && (t.sessions = JSON.parse(e.sessions)), e.oidc_logout && typeof e.oidc_logout == "string" && (t.oidc_logout = JSON.parse(e.oidc_logout)), e.device_flow && typeof e.device_flow == "string" && (t.device_flow = JSON.parse(e.device_flow)), e.default_token_quota && typeof e.default_token_quota == "string" && (t.default_token_quota = JSON.parse(e.default_token_quota)), e.allowed_logout_urls && typeof e.allowed_logout_urls == "string" && (t.allowed_logout_urls = JSON.parse(e.allowed_logout_urls)), e.acr_values_supported && typeof e.acr_values_supported == "string" && (t.acr_values_supported = JSON.parse(e.acr_values_supported)), e.mtls && typeof e.mtls == "string" && (t.mtls = JSON.parse(e.mtls)), e.mfa && typeof e.mfa == "string" && (t.mfa = JSON.parse(e.mfa)), e.attack_protection && typeof e.attack_protection == "string" && (t.attack_protection = JSON.parse(e.attack_protection)), e.allow_organization_name_in_authentication_api !== void 0 && (t.allow_organization_name_in_authentication_api = e.allow_organization_name_in_authentication_api === 1), e.customize_mfa_in_postlogin_action !== void 0 && (t.customize_mfa_in_postlogin_action = e.customize_mfa_in_postlogin_action === 1), e.pushed_authorization_requests_supported !== void 0 && (t.pushed_authorization_requests_supported = e.pushed_authorization_requests_supported === 1), e.authorization_response_iss_parameter_supported !== void 0 && (t.authorization_response_iss_parameter_supported = e.authorization_response_iss_parameter_supported === 1), l(t);
 }
-function mt(e) {
+function gt(e) {
 	let t = { ...e };
 	return d(e, [
 		"session_cookie",
@@ -986,14 +1020,14 @@ function mt(e) {
 }
 //#endregion
 //#region src/tenants/create.ts
-function ht(e) {
+function _t(e) {
 	return async (n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
 			id: i?.id ?? n.id ?? t(),
 			created_at: i?.created_at ?? a,
 			updated_at: i?.updated_at ?? a
-		}, s = mt(o);
+		}, s = gt(o);
 		try {
 			await e.insertInto("tenants").values(s).execute();
 		} catch (e) {
@@ -1005,23 +1039,23 @@ function ht(e) {
 }
 //#endregion
 //#region src/tenants/get.ts
-function gt(e) {
+function vt(e) {
 	return async (t) => {
 		let n = await e.selectFrom("tenants").where("tenants.id", "=", t).selectAll().executeTakeFirst();
-		return n ? pt(n) : null;
+		return n ? ht(n) : null;
 	};
 }
 //#endregion
 //#region src/tenants/list.ts
-function _t(e) {
+function yt(e) {
 	return async (t) => {
 		let n = e.selectFrom("tenants"), { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = t || {};
 		if (s && s.sort_by) {
 			let { ref: t } = e.dynamic;
 			n = n.orderBy(t(s.sort_by), s.sort_order);
 		}
-		c && (n = D(e, n, c, ["friendly_name"]));
-		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(pt);
+		c && (n = O(e, n, c, ["friendly_name"]));
+		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(ht);
 		if (!a) return { tenants: l };
 		let { count: u } = await n.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow(), d = o(u);
 		return {
@@ -1034,10 +1068,10 @@ function _t(e) {
 }
 //#endregion
 //#region src/tenants/update.ts
-function vt(e) {
+function bt(e) {
 	return async (t, n) => {
 		let r = {
-			...mt(n),
+			...gt(n),
 			id: t,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		};
@@ -1046,29 +1080,29 @@ function vt(e) {
 }
 //#endregion
 //#region src/tenants/remove.ts
-function yt(e) {
+function xt(e) {
 	return async (t) => (await e.deleteFrom("tenants").where("tenants.id", "=", t).execute()).length === 1;
 }
 //#endregion
 //#region src/tenants/index.ts
-function bt(e) {
+function St(e) {
 	return {
-		create: ht(e),
-		get: gt(e),
-		list: _t(e),
-		update: vt(e),
-		remove: yt(e)
+		create: _t(e),
+		get: vt(e),
+		list: yt(e),
+		update: bt(e),
+		remove: xt(e)
 	};
 }
 //#endregion
 //#region src/logs/create.ts
-function xt(e) {
+function Ct(e) {
 	return e ? JSON.stringify(e) : void 0;
 }
-var St = 256;
-function Ct(e) {
+var wt = 256;
+function Tt(e) {
 	return async (n, r) => {
-		let i = r.user_agent?.slice(0, St), a = r.log_id || t(), { location_info: o, ...s } = r;
+		let i = r.user_agent?.slice(0, wt), a = r.log_id || t(), { location_info: o, ...s } = r;
 		return await e.insertInto("logs").values({
 			...s,
 			log_id: a,
@@ -1077,8 +1111,8 @@ function Ct(e) {
 			description: r.description?.substring(0, 256),
 			isMobile: +!!r.isMobile,
 			scope: r.scope,
-			auth0_client: xt(r.auth0_client),
-			details: xt(r.details)?.substring(0, 8192),
+			auth0_client: Ct(r.auth0_client),
+			details: Ct(r.details)?.substring(0, 8192),
 			country_code: o?.country_code,
 			city_name: o?.city_name,
 			latitude: o?.latitude,
@@ -1094,7 +1128,7 @@ function Ct(e) {
 }
 //#endregion
 //#region src/logs/logs.ts
-function wt(e) {
+function Et(e) {
 	if (!e) return "";
 	try {
 		return JSON.parse(e);
@@ -1102,13 +1136,13 @@ function wt(e) {
 		return e;
 	}
 }
-function I(e) {
+function Dt(e) {
 	return {
 		...e,
 		client_id: e.client_id,
 		client_name: e.client_name || "",
-		auth0_client: wt(e.auth0_client),
-		details: wt(e.details),
+		auth0_client: Et(e.auth0_client),
+		details: Et(e.details),
 		isMobile: !!e.isMobile,
 		scope: e.scope || void 0,
 		log_id: e.log_id,
@@ -1124,7 +1158,7 @@ function I(e) {
 }
 //#endregion
 //#region src/logs/list.ts
-var Tt = [
+var Ot = [
 	"user_id",
 	"ip",
 	"type",
@@ -1150,25 +1184,25 @@ var Tt = [
 	"time_zone",
 	"continent_code"
 ];
-function Et(e) {
+function kt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, from_date: l, to_date: u } = n, d = e.selectFrom("logs").where("logs.tenant_id", "=", t);
 		if (c) {
-			let t = S(c, Tt);
-			t && (d = D(e, d, t, [
+			let t = S(c, Ot);
+			t && (d = O(e, d, t, [
 				"user_id",
 				"ip",
 				"description"
 			], ["description"]));
 		}
-		if (typeof l == "number" && Number.isFinite(l) && (d = d.where("logs.date", ">=", (/* @__PURE__ */ new Date(Math.floor(l) * 1e3)).toISOString())), typeof u == "number" && Number.isFinite(u) && (d = d.where("logs.date", "<=", (/* @__PURE__ */ new Date(Math.floor(u) * 1e3 + 999)).toISOString())), M(n)) {
+		if (typeof l == "number" && Number.isFinite(l) && (d = d.where("logs.date", ">=", (/* @__PURE__ */ new Date(Math.floor(l) * 1e3)).toISOString())), typeof u == "number" && Number.isFinite(u) && (d = d.where("logs.date", "<=", (/* @__PURE__ */ new Date(Math.floor(u) * 1e3 + 999)).toISOString())), P(n)) {
 			if (s?.sort_by && s.sort_by !== "date") throw new C(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only date is` });
-			let e = s?.sort_order === "asc" ? "asc" : "desc", { rows: t, limit: r, next: i } = await N(d.selectAll(), n, {
+			let e = s?.sort_order === "asc" ? "asc" : "desc", { rows: t, limit: r, next: i } = await F(d.selectAll(), n, {
 				sortColumn: "date",
 				sortOrder: e,
 				idColumn: "log_id",
 				sortKey: `date:${e}`
-			}), a = t.map(I);
+			}), a = t.map(Dt);
 			return {
 				logs: a,
 				start: 0,
@@ -1183,7 +1217,7 @@ function Et(e) {
 			f = f.orderBy(t(s.sort_by), s.sort_order);
 		}
 		f = f.offset(r * i).limit(i);
-		let p = (await f.selectAll().execute()).map(I);
+		let p = (await f.selectAll().execute()).map(Dt);
 		if (!a) return {
 			logs: p,
 			start: 0,
@@ -1201,24 +1235,24 @@ function Et(e) {
 }
 //#endregion
 //#region src/logs/get.ts
-function Dt(e) {
+function At(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("logs").where("logs.tenant_id", "=", t).where("logs.log_id", "=", n).selectAll().executeTakeFirst();
-		return r ? I(r) : null;
+		return r ? Dt(r) : null;
 	};
 }
 //#endregion
 //#region src/logs/index.ts
-function Ot(e) {
+function jt(e) {
 	return {
-		create: Ct(e),
-		list: Et(e),
-		get: Dt(e)
+		create: Tt(e),
+		list: kt(e),
+		get: At(e)
 	};
 }
 //#endregion
 //#region src/sessions/get.ts
-function kt(e) {
+function Mt(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("sessions").where("sessions.tenant_id", "=", t).where("sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -1252,7 +1286,7 @@ function kt(e) {
 }
 //#endregion
 //#region src/sessions/create.ts
-function At(e) {
+function Nt(e) {
 	return async (t, n) => {
 		let r = Date.now(), i = c(), a = {
 			...n,
@@ -1284,12 +1318,12 @@ function At(e) {
 }
 //#endregion
 //#region src/sessions/remove.ts
-function jt(e) {
+function Pt(e) {
 	return async (t, n) => !!(await e.deleteFrom("sessions").where("tenant_id", "=", t).where("sessions.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/sessions/update.ts
-function Mt(e) {
+function Ft(e) {
 	return async (t, n, r) => {
 		let i = Date.now(), a = {
 			updated_at_ts: i,
@@ -1310,10 +1344,10 @@ function Mt(e) {
 }
 //#endregion
 //#region src/sessions/list.ts
-function Nt(e) {
+function It(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("sessions").where("sessions.tenant_id", "=", t);
-		l && (u = D(e, u, l, ["user_id", "session_id"]));
+		l && (u = O(e, u, l, ["user_id", "session_id"]));
 		let d = u;
 		if (c && c.sort_by) {
 			let { ref: t } = e.dynamic;
@@ -1365,18 +1399,18 @@ function Nt(e) {
 }
 //#endregion
 //#region src/sessions/index.ts
-function Pt(e) {
+function Lt(e) {
 	return {
-		create: At(e),
-		get: kt(e),
-		list: Nt(e),
-		remove: jt(e),
-		update: Mt(e)
+		create: Nt(e),
+		get: Mt(e),
+		list: It(e),
+		remove: Pt(e),
+		update: Ft(e)
 	};
 }
 //#endregion
 //#region src/passwords/get.ts
-function Ft(e) {
+function Rt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).where("passwords.is_current", "=", 1).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1389,7 +1423,7 @@ function Ft(e) {
 }
 //#endregion
 //#region src/passwords/create.ts
-function It(e) {
+function zt(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = a?.id || r.id || t(), s = r.is_current ?? !0, c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...r,
@@ -1407,7 +1441,7 @@ function It(e) {
 }
 //#endregion
 //#region src/passwords/update.ts
-function Lt(e) {
+function Bt(e) {
 	return async (t, n) => {
 		let r = e.updateTable("passwords").set({
 			password: n.password,
@@ -1420,7 +1454,7 @@ function Lt(e) {
 }
 //#endregion
 //#region src/passwords/list.ts
-function Rt(e) {
+function Vt(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).orderBy("created_at", "desc");
 		return r && (i = i.limit(r)), (await i.selectAll().execute()).map(({ tenant_id: e, ...t }) => ({
@@ -1431,20 +1465,20 @@ function Rt(e) {
 }
 //#endregion
 //#region src/passwords/index.ts
-function zt(e) {
+function Ht(e) {
 	return {
-		create: It(e),
-		update: Lt(e),
-		get: Ft(e),
-		list: Rt(e)
+		create: zt(e),
+		update: Bt(e),
+		get: Rt(e),
+		list: Vt(e)
 	};
 }
 //#endregion
 //#region src/codes/list.ts
-function Bt(e) {
+function Ut(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("codes").where("codes.tenant_id", "=", t);
-		s && (c = D(e, c, s, ["code", "login_id"]));
+		s && (c = O(e, c, s, ["code", "login_id"]));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let { tenant_id: t, ...n } = e;
 			return g.parse(l(n));
@@ -1466,13 +1500,13 @@ function Bt(e) {
 }
 //#endregion
 //#region src/codes/expires-at-ts.ts
-function Vt(e) {
+function Wt(e) {
 	let t = new Date(e).getTime();
 	return Number.isNaN(t) ? 0 : t;
 }
 //#endregion
 //#region src/codes/create.ts
-function Ht(e) {
+function Gt(e) {
 	return async (t, n) => {
 		let r = {
 			...n,
@@ -1481,18 +1515,18 @@ function Ht(e) {
 		return await e.insertInto("codes").values({
 			...r,
 			tenant_id: t,
-			expires_at_ts: Vt(r.expires_at)
+			expires_at_ts: Wt(r.expires_at)
 		}).execute(), r;
 	};
 }
 //#endregion
 //#region src/codes/remove.ts
-function Ut(e) {
+function Kt(e) {
 	return async (t, n) => (await e.deleteFrom("codes").where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/codes/get.ts
-function Wt(e) {
+function qt(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("codes").where("codes.code_id", "=", n).where("codes.code_type", "=", r);
 		t.length && (i = i.where("codes.tenant_id", "=", t));
@@ -1502,38 +1536,38 @@ function Wt(e) {
 }
 //#endregion
 //#region src/codes/used.ts
-function Gt(e) {
+function Jt(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/consume.ts
-function Kt(e) {
+function Yt(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).where("codes.used_at", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/cleanup.ts
-function qt(e) {
+function Xt(e) {
 	return async (t) => {
-		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", Vt(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
+		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", Wt(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows) + Number(r.numDeletedRows);
 	};
 }
 //#endregion
 //#region src/codes/index.ts
-function Jt(e) {
+function Zt(e) {
 	return {
-		create: Ht(e),
-		list: Bt(e),
-		remove: Ut(e),
-		used: Gt(e),
-		consume: Kt(e),
-		get: Wt(e),
-		cleanup: qt(e)
+		create: Gt(e),
+		list: Ut(e),
+		remove: Kt(e),
+		used: Jt(e),
+		consume: Yt(e),
+		get: qt(e),
+		cleanup: Xt(e)
 	};
 }
 //#endregion
 //#region src/connections/create.ts
-function Yt(e) {
+function Qt(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, { is_system: a, ...o } = n;
 		delete o.enabled_clients;
@@ -1554,7 +1588,7 @@ function Yt(e) {
 }
 //#endregion
 //#region src/connections/transform.ts
-function L(e) {
+function $t(e) {
 	let { is_system: t, ...n } = e;
 	return l({
 		...n,
@@ -1562,16 +1596,16 @@ function L(e) {
 		options: typeof e.options == "string" ? JSON.parse(e.options) : {}
 	});
 }
-function Xt(e) {
-	return e.map(L);
+function en(e) {
+	return e.map($t);
 }
 //#endregion
 //#region src/connections/list.ts
-function Zt(e) {
+function tn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("connections").where("connections.tenant_id", "=", t);
-		s && (c = D(e, c, s, ["user_id", "ip"]));
-		let l = Xt(await c.offset(r * i).limit(i).selectAll().execute());
+		s && (c = O(e, c, s, ["user_id", "ip"]));
+		let l = en(await c.offset(r * i).limit(i).selectAll().execute());
 		if (!a) return {
 			connections: l,
 			start: 0,
@@ -1589,20 +1623,20 @@ function Zt(e) {
 }
 //#endregion
 //#region src/connections/remove.ts
-function Qt(e) {
+function nn(e) {
 	return async (t, n) => (await e.deleteFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/connections/get.ts
-function $t(e) {
+function rn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).selectAll().executeTakeFirst();
-		return r ? L(r) : null;
+		return r ? $t(r) : null;
 	};
 }
 //#endregion
 //#region src/connections/update.ts
-function en(e) {
+function an(e) {
 	return async (t, n, r) => {
 		let { is_system: i, ...a } = r;
 		delete a.enabled_clients;
@@ -1619,18 +1653,18 @@ function en(e) {
 }
 //#endregion
 //#region src/connections/index.ts
-function tn(e) {
+function on(e) {
 	return {
-		create: Yt(e),
-		get: $t(e),
-		list: Zt(e),
-		remove: Qt(e),
-		update: en(e)
+		create: Qt(e),
+		get: rn(e),
+		list: tn(e),
+		remove: nn(e),
+		update: an(e)
 	};
 }
 //#endregion
 //#region src/clients/create.ts
-function nn(e) {
+function sn(e) {
 	return async (r, i, a) => {
 		let o = a?.importMetadata, s = o?.id ?? i.client_id ?? t(), c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...i,
@@ -1695,7 +1729,7 @@ function nn(e) {
 }
 //#endregion
 //#region src/clients/get.ts
-function rn(e) {
+function cn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1741,7 +1775,7 @@ function rn(e) {
 }
 //#endregion
 //#region src/clients/getByClientId.ts
-function an(e) {
+function ln(e) {
 	return async (t) => {
 		let n = await e.selectFrom("clients").where("clients.client_id", "=", t).selectAll().executeTakeFirst();
 		return n ? l({
@@ -1785,7 +1819,7 @@ function an(e) {
 }
 //#endregion
 //#region src/clients/list.ts
-function on(e) {
+function un(e) {
 	return l({
 		...e,
 		global: !!e.global,
@@ -1824,7 +1858,7 @@ function on(e) {
 		registration_metadata: e.registration_metadata ? JSON.parse(e.registration_metadata) : void 0
 	});
 }
-function sn(e) {
+function dn(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("clients").where("clients.tenant_id", "=", t), i = new Set(["owner_user_id", "registration_type"]);
 		if (n?.q) {
@@ -1834,12 +1868,12 @@ function sn(e) {
 				r = r.where(t, "=", e[2]);
 			} else r = r.where((e) => e.or([e("name", "like", `%${n.q}%`), e("client_id", "like", `%${n.q}%`)]));
 		}
-		if (M(n)) {
-			let { rows: e, limit: t, next: i } = await N(r.selectAll(), n, {
+		if (P(n)) {
+			let { rows: e, limit: t, next: i } = await F(r.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "client_id"
-			}), a = e.map(on);
+			}), a = e.map(un);
 			return {
 				clients: a,
 				totals: {
@@ -1872,7 +1906,7 @@ function sn(e) {
 			let a = await r.executeTakeFirst();
 			c = Number(a?.count || 0);
 		}
-		let l = s.map(on);
+		let l = s.map(un);
 		return {
 			clients: l,
 			totals: {
@@ -1886,12 +1920,12 @@ function sn(e) {
 }
 //#endregion
 //#region src/clients/remove.ts
-function cn(e) {
+function fn(e) {
 	return async (t, n) => (await e.deleteFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clients/update.ts
-function ln(e) {
+function pn(e) {
 	return async (t, r, i) => {
 		let a = {
 			...i,
@@ -1938,31 +1972,31 @@ function ln(e) {
 }
 //#endregion
 //#region src/clients/index.ts
-function un(e) {
+function mn(e) {
 	return {
-		create: nn(e),
-		get: rn(e),
-		getByClientId: an(e),
-		list: sn(e),
-		remove: cn(e),
-		update: ln(e)
+		create: sn(e),
+		get: cn(e),
+		getByClientId: ln(e),
+		list: dn(e),
+		remove: fn(e),
+		update: pn(e)
 	};
 }
 //#endregion
 //#region src/clientConnections/listByClient.ts
-function dn(e) {
+function hn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).select("connections").executeTakeFirst();
 		if (!r) return [];
 		let i = JSON.parse(r.connections || "[]");
 		if (i.length === 0) return [];
-		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, L(e)]));
+		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, $t(e)]));
 		return i.map((e) => o.get(e)).filter((e) => e !== void 0);
 	};
 }
 //#endregion
 //#region src/clientConnections/updateByClient.ts
-function fn(e) {
+function gn(e) {
 	return async (t, n, r) => (await e.updateTable("clients").set({
 		connections: JSON.stringify(r),
 		updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -1970,7 +2004,7 @@ function fn(e) {
 }
 //#endregion
 //#region src/clientConnections/listByConnection.ts
-function pn(e) {
+function _n(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).select(["client_id", "connections"]).execute(), i = [];
 		for (let e of r) JSON.parse(e.connections || "[]").includes(n) && i.push(e.client_id);
@@ -1979,7 +2013,7 @@ function pn(e) {
 }
 //#endregion
 //#region src/clientConnections/addClientToConnection.ts
-function mn(e) {
+function vn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -1992,7 +2026,7 @@ function mn(e) {
 }
 //#endregion
 //#region src/clientConnections/removeClientFromConnection.ts
-function hn(e) {
+function yn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2005,18 +2039,18 @@ function hn(e) {
 }
 //#endregion
 //#region src/clientConnections/index.ts
-function gn(e) {
+function bn(e) {
 	return {
-		listByClient: dn(e),
-		updateByClient: fn(e),
-		listByConnection: pn(e),
-		addClientToConnection: mn(e),
-		removeClientFromConnection: hn(e)
+		listByClient: hn(e),
+		updateByClient: gn(e),
+		listByConnection: _n(e),
+		addClientToConnection: vn(e),
+		removeClientFromConnection: yn(e)
 	};
 }
 //#endregion
 //#region src/clientGrants/create.ts
-function _n(e) {
+function xn(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? t(), c = a?.created_at ?? o, u = a?.updated_at ?? a?.created_at ?? o, { scope: d, authorization_details_types: f, ...p } = r, m = {
 			id: s,
@@ -2044,7 +2078,7 @@ function _n(e) {
 }
 //#endregion
 //#region src/clientGrants/get.ts
-function vn(e) {
+function Sn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_grants").selectAll().where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -2064,7 +2098,7 @@ function vn(e) {
 }
 //#endregion
 //#region src/clientGrants/list.ts
-function yn(e) {
+function Cn(e) {
 	return m.parse(l({
 		...e,
 		scope: e.scope ? JSON.parse(e.scope) : [],
@@ -2073,7 +2107,7 @@ function yn(e) {
 		authorization_details_types: e.authorization_details_types ? JSON.parse(e.authorization_details_types) : []
 	}));
 }
-function bn(e) {
+function wn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s, sort: c } = n, l = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
 		if (s) {
@@ -2084,13 +2118,13 @@ function bn(e) {
 					let e = +(a === "true");
 					l = l.where(o, t ? "!=" : "=", e);
 				} else l = l.where(o, t ? "!=" : "=", a);
-			} else l = D(e, l, t, []);
+			} else l = O(e, l, t, []);
 		}
-		if (M(n)) {
-			let { rows: e, limit: t, next: r } = await N(l.selectAll(), n, {
+		if (P(n)) {
+			let { rows: e, limit: t, next: r } = await F(l.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
-			}), i = e.map(yn);
+			}), i = e.map(Cn);
 			return {
 				client_grants: i,
 				start: 0,
@@ -2104,7 +2138,7 @@ function bn(e) {
 			let { ref: t } = e.dynamic;
 			u = u.orderBy(t(c.sort_by), c.sort_order);
 		} else u = u.orderBy("client_grants.created_at", "desc");
-		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(yn);
+		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(Cn);
 		if (!a) return {
 			client_grants: d,
 			start: 0,
@@ -2122,12 +2156,12 @@ function bn(e) {
 }
 //#endregion
 //#region src/clientGrants/remove.ts
-function xn(e) {
+function Tn(e) {
 	return async (t, n) => ((await e.deleteFrom("client_grants").where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst()).numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/clientGrants/update.ts
-function Sn(e) {
+function En(e) {
 	return async (t, n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), { scope: a, authorization_details_types: o, ...s } = r, c = {
 			...s,
@@ -2138,18 +2172,18 @@ function Sn(e) {
 }
 //#endregion
 //#region src/clientGrants/index.ts
-function Cn(e) {
+function Dn(e) {
 	return {
-		create: _n(e),
-		get: vn(e),
-		list: bn(e),
-		remove: xn(e),
-		update: Sn(e)
+		create: xn(e),
+		get: Sn(e),
+		list: wn(e),
+		remove: Tn(e),
+		update: En(e)
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/create.ts
-function wn(e) {
+function On(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("client_registration_tokens").values({
@@ -2180,12 +2214,12 @@ function wn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/row-mapper.ts
-function Tn(e) {
+function kn(e) {
 	let t = h.safeParse(e);
 	if (!t.success) throw Error(`Unknown client_registration_tokens.type: ${e}`);
 	return t.data;
 }
-function En(e) {
+function An(e) {
 	if (!e) return;
 	let t;
 	try {
@@ -2199,10 +2233,10 @@ function R(e) {
 	return {
 		id: e.id,
 		token_hash: e.token_hash,
-		type: Tn(e.type),
+		type: kn(e.type),
 		client_id: e.client_id ?? void 0,
 		sub: e.sub ?? void 0,
-		constraints: En(e.constraints),
+		constraints: An(e.constraints),
 		single_use: !!e.single_use,
 		expires_at: i(e.expires_at_ts),
 		used_at: i(e.used_at_ts),
@@ -2212,7 +2246,7 @@ function R(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/get.ts
-function Dn(e) {
+function jn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
 		return r ? R(r) : null;
@@ -2220,7 +2254,7 @@ function Dn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/getByHash.ts
-function On(e) {
+function Mn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
 		return r ? R(r) : null;
@@ -2228,22 +2262,22 @@ function On(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/listByClient.ts
-function kn(e) {
+function Nn(e) {
 	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(R);
 }
 //#endregion
 //#region src/clientRegistrationTokens/markUsed.ts
-function An(e) {
+function Pn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ used_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("used_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revoke.ts
-function jn(e) {
+function Fn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revokeByClient.ts
-function Mn(e) {
+function In(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("client_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows);
@@ -2251,29 +2285,29 @@ function Mn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/remove.ts
-function Nn(e) {
+function Ln(e) {
 	return async (t, n) => (await e.deleteFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/index.ts
-function Pn(e) {
+function Rn(e) {
 	return {
-		create: wn(e),
-		get: Dn(e),
-		getByHash: On(e),
-		listByClient: kn(e),
-		markUsed: An(e),
-		revoke: jn(e),
-		revokeByClient: Mn(e),
-		remove: Nn(e)
+		create: On(e),
+		get: jn(e),
+		getByHash: Mn(e),
+		listByClient: Nn(e),
+		markUsed: Pn(e),
+		revoke: Fn(e),
+		revokeByClient: In(e),
+		remove: Ln(e)
 	};
 }
 //#endregion
 //#region src/keys/list.ts
-function Fn(e) {
+function zn(e) {
 	return async (t = {}) => {
 		let { page: n = 0, per_page: r = 100, include_totals: i = !1, sort: a, q: s } = t, c = e.selectFrom("keys").where((e) => e.or([e("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()), e("revoked_at", "is", null)]));
-		s && (c = D(e, c, s, [
+		s && (c = O(e, c, s, [
 			"kid",
 			"tenant_id",
 			"connection",
@@ -2299,7 +2333,7 @@ function Fn(e) {
 }
 //#endregion
 //#region src/keys/create.ts
-function In(e) {
+function Bn(e) {
 	return async (t, n) => {
 		let r = n?.importMetadata;
 		await e.insertInto("keys").values({
@@ -2311,21 +2345,21 @@ function In(e) {
 }
 //#endregion
 //#region src/keys/update.ts
-function Ln(e) {
+function Vn(e) {
 	return async (t, n) => !!(await e.updateTable("keys").set(n).where("kid", "=", t).execute()).length;
 }
 //#endregion
 //#region src/keys/index.ts
-function Rn(e) {
+function Hn(e) {
 	return {
-		create: In(e),
-		list: Fn(e),
-		update: Ln(e)
+		create: Bn(e),
+		list: zn(e),
+		update: Vn(e)
 	};
 }
 //#endregion
 //#region src/customDomains/create.ts
-function zn(e) {
+function Un(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			status: "pending",
@@ -2345,35 +2379,35 @@ function zn(e) {
 }
 //#endregion
 //#region src/customDomains/list.ts
-function Bn(e) {
+function Wn(e) {
 	return async (t) => (await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).selectAll().execute()).map((e) => ({
 		...e,
 		primary: e.primary === 1,
-		domain_metadata: F(e.domain_metadata, void 0),
-		verification: F(e.verification, void 0)
+		domain_metadata: L(e.domain_metadata, void 0),
+		verification: L(e.verification, void 0)
 	}));
 }
 //#endregion
 //#region src/customDomains/remove.ts
-function Vn(e) {
+function Gn(e) {
 	return async (t, n) => (await e.deleteFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/customDomains/get.ts
-function Hn(e) {
+function Kn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
 			...r,
 			primary: r.primary === 1,
-			domain_metadata: F(r.domain_metadata, void 0),
-			verification: F(r.verification, void 0)
+			domain_metadata: L(r.domain_metadata, void 0),
+			verification: L(r.verification, void 0)
 		} : null;
 	};
 }
 //#endregion
 //#region src/customDomains/update.ts
-function Un(e) {
+function qn(e) {
 	return async (t, n, r) => {
 		let { verification: i, domain_metadata: a, primary: o, ...s } = r, c = {
 			...s,
@@ -2387,31 +2421,31 @@ function Un(e) {
 }
 //#endregion
 //#region src/customDomains/getByDomain.ts
-function Wn(e) {
+function Jn(e) {
 	return async (t) => {
 		let n = await e.selectFrom("custom_domains").where("custom_domains.domain", "=", t).selectAll().executeTakeFirst();
 		return n ? {
 			...n,
 			primary: n.primary === 1,
-			domain_metadata: F(n.domain_metadata, void 0)
+			domain_metadata: L(n.domain_metadata, void 0)
 		} : null;
 	};
 }
 //#endregion
 //#region src/customDomains/index.ts
-function Gn(e) {
+function Yn(e) {
 	return {
-		create: zn(e),
-		get: Hn(e),
-		getByDomain: Wn(e),
-		list: Bn(e),
-		remove: Vn(e),
-		update: Un(e)
+		create: Un(e),
+		get: Kn(e),
+		getByDomain: Jn(e),
+		list: Wn(e),
+		remove: Gn(e),
+		update: qn(e)
 	};
 }
 //#endregion
 //#region src/branding/get.ts
-function Kn(e) {
+function Xn(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("branding").where("branding.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2433,7 +2467,7 @@ function Kn(e) {
 }
 //#endregion
 //#region src/branding/set.ts
-function qn(e) {
+function Zn(e) {
 	return async (t, n) => {
 		let { colors: r, font: i, ...a } = n, o = r?.page_background, s = o && typeof o == "object" ? o : void 0;
 		try {
@@ -2462,15 +2496,15 @@ function qn(e) {
 }
 //#endregion
 //#region src/branding/index.ts
-function Jn(e) {
+function Qn(e) {
 	return {
-		get: Kn(e),
-		set: qn(e)
+		get: Xn(e),
+		set: Zn(e)
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/get.ts
-function Yn(e) {
+function $n(e) {
 	return async (t) => {
 		let n = await e.selectFrom("universal_login_templates").select(["body"]).where("tenant_id", "=", t).executeTakeFirst();
 		return n ? { body: n.body } : null;
@@ -2478,7 +2512,7 @@ function Yn(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/set.ts
-function Xn(e) {
+function er(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : a;
 		try {
@@ -2499,26 +2533,26 @@ function Xn(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/delete.ts
-function Zn(e) {
+function tr(e) {
 	return async (t) => {
 		await e.deleteFrom("universal_login_templates").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/index.ts
-function Qn(e) {
+function nr(e) {
 	return {
-		get: Yn(e),
-		set: Xn(e),
-		delete: Zn(e)
+		get: $n(e),
+		set: er(e),
+		delete: tr(e)
 	};
 }
 //#endregion
 //#region src/hooks/list.ts
-function $n(e) {
+function rr(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: u } = n, d = e.selectFrom("hooks").where("hooks.tenant_id", "=", t);
-		if (u && (d = D(e, d, u, [
+		if (u && (d = O(e, d, u, [
 			"url",
 			"form_id",
 			"template_id",
@@ -2537,7 +2571,7 @@ function $n(e) {
 				...u,
 				enabled: !!n,
 				synchronous: !!i,
-				metadata: ot(s)
+				metadata: ct(s)
 			});
 		});
 		if (!s) return {
@@ -2557,7 +2591,7 @@ function $n(e) {
 }
 //#endregion
 //#region src/hooks/get.ts
-function er(e) {
+function ir(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2570,18 +2604,18 @@ function er(e) {
 			...d,
 			enabled: !!u.enabled,
 			synchronous: !!u.synchronous,
-			metadata: ot(c)
+			metadata: ct(c)
 		});
 	};
 }
 //#endregion
 //#region src/hooks/remove.ts
-function tr(e) {
+function ar(e) {
 	return async (t, n) => (await e.deleteFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hooks/create.ts
-function nr(e) {
+function or(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? (n.hook_id || Se()), { hook_id: l, enabled: u, synchronous: d, metadata: f, ...p } = n;
 		return await e.insertInto("hooks").values({
@@ -2606,7 +2640,7 @@ function nr(e) {
 }
 //#endregion
 //#region src/hooks/update.ts
-function rr(e) {
+function sr(e) {
 	return async (t, n, r) => {
 		let { hook_id: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -2620,18 +2654,18 @@ function rr(e) {
 }
 //#endregion
 //#region src/hooks/index.ts
-function ir(e) {
+function cr(e) {
 	return {
-		create: nr(e),
-		get: er(e),
-		list: $n(e),
-		update: rr(e),
-		remove: tr(e)
+		create: or(e),
+		get: ir(e),
+		list: rr(e),
+		update: sr(e),
+		remove: ar(e)
 	};
 }
 //#endregion
 //#region src/hook-code/create.ts
-function ar(e) {
+function lr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? we();
 		return await e.insertInto("hook_code").values({
@@ -2653,7 +2687,7 @@ function ar(e) {
 }
 //#endregion
 //#region src/hook-code/get.ts
-function or(e) {
+function ur(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2677,7 +2711,7 @@ function or(e) {
 }
 //#endregion
 //#region src/hook-code/update.ts
-function sr(e) {
+function dr(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		return r.code !== void 0 && (i.code = r.code), r.secrets !== void 0 && (i.secrets = JSON.stringify(r.secrets)), (await e.updateTable("hook_code").set(i).where("hook_code.id", "=", n).where("hook_code.tenant_id", "=", t).executeTakeFirst()).numUpdatedRows > 0;
@@ -2685,22 +2719,22 @@ function sr(e) {
 }
 //#endregion
 //#region src/hook-code/remove.ts
-function cr(e) {
+function fr(e) {
 	return async (t, n) => (await e.deleteFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hook-code/index.ts
-function lr(e) {
+function pr(e) {
 	return {
-		create: ar(e),
-		get: or(e),
-		update: sr(e),
-		remove: cr(e)
+		create: lr(e),
+		get: ur(e),
+		update: dr(e),
+		remove: fr(e)
 	};
 }
 //#endregion
 //#region src/themes/create.ts
-function ur(e) {
+function mr(e) {
 	return async (n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString(), c = {
 			themeId: o?.id || i || t(),
@@ -2711,20 +2745,20 @@ function ur(e) {
 			...c,
 			tenant_id: n
 		};
-		return await e.insertInto("themes").values(P(l)).execute(), c;
+		return await e.insertInto("themes").values(I(l)).execute(), c;
 	};
 }
 //#endregion
 //#region src/themes/remove.ts
-function dr(e) {
+function hr(e) {
 	return async (t, n) => (await e.deleteFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/themes/get.ts
-function fr(e) {
+function gr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).selectAll().executeTakeFirst();
-		return r ? l(Qe({
+		return r ? l(et({
 			...r,
 			borders_show_widget_shadow: !!r.borders_show_widget_shadow,
 			fonts_body_text_bold: !!r.fonts_body_text_bold,
@@ -2744,9 +2778,9 @@ function fr(e) {
 }
 //#endregion
 //#region src/themes/update.ts
-function pr(e) {
+function _r(e) {
 	return async (t, n, r) => {
-		let { themeId: i, ...a } = r, o = P({
+		let { themeId: i, ...a } = r, o = I({
 			...a,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		});
@@ -2755,17 +2789,17 @@ function pr(e) {
 }
 //#endregion
 //#region src/themes/index.ts
-function mr(e) {
+function vr(e) {
 	return {
-		create: ur(e),
-		get: fr(e),
-		remove: dr(e),
-		update: pr(e)
+		create: mr(e),
+		get: gr(e),
+		remove: hr(e),
+		update: _r(e)
 	};
 }
 //#endregion
 //#region src/loginSessions/get.ts
-function hr(e) {
+function yr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("login_sessions").where("login_sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2777,7 +2811,7 @@ function hr(e) {
 			"created_at_ts",
 			"updated_at_ts",
 			"expires_at_ts"
-		]), f = Qe(l({
+		]), f = et(l({
 			...u,
 			...d,
 			state: i.state || p.PENDING,
@@ -2789,28 +2823,28 @@ function hr(e) {
 }
 //#endregion
 //#region src/utils/ulid.ts
-var gr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", z = 32, _r = 10, vr = 16;
-function yr(e) {
+var br = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", z = 32, xr = 10, Sr = 16;
+function Cr(e) {
 	let t = "";
-	for (let n = _r; n > 0; n--) t = gr.charAt(e % z) + t, e = Math.floor(e / z);
+	for (let n = xr; n > 0; n--) t = br.charAt(e % z) + t, e = Math.floor(e / z);
 	return t;
 }
-function br() {
-	let e = new Uint8Array(vr);
+function wr() {
+	let e = new Uint8Array(Sr);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < vr; n++) t += gr.charAt(e[n] % z);
+	for (let n = 0; n < Sr; n++) t += br.charAt(e[n] % z);
 	return t;
 }
-function xr() {
-	return yr(Date.now()) + br();
+function Tr() {
+	return Cr(Date.now()) + wr();
 }
 //#endregion
 //#region src/loginSessions/create.ts
-function Sr(e) {
+function Er(e) {
 	return async (t, n) => {
 		let r = c(), i = {
-			id: xr(),
+			id: Tr(),
 			...n,
 			authorization_url: n.authorization_url?.slice(0, 1024),
 			created_at: r,
@@ -2818,7 +2852,7 @@ function Sr(e) {
 			state: n.state || p.PENDING,
 			state_data: n.state_data,
 			failure_reason: n.failure_reason
-		}, { authParams: a, ...o } = i, s = Date.now(), l = P(o);
+		}, { authParams: a, ...o } = i, s = Date.now(), l = I(o);
 		return delete l.created_at, delete l.updated_at, delete l.expires_at, await e.insertInto("login_sessions").values({
 			...l,
 			tenant_id: t,
@@ -2831,7 +2865,7 @@ function Sr(e) {
 }
 //#endregion
 //#region src/loginSessions/update.ts
-function Cr(e) {
+function Dr(e) {
 	return async (t, n, r) => {
 		let { created_at: i, updated_at: a, expires_at: o, authParams: c, ...l } = r, u = {};
 		if (c !== void 0) {
@@ -2841,7 +2875,7 @@ function Cr(e) {
 				...c
 			}) };
 		}
-		let d = P(l);
+		let d = I(l);
 		return delete d.created_at_ts, delete d.updated_at_ts, delete d.expires_at_ts, delete d.id, delete d.tenant_id, (await e.updateTable("login_sessions").set({
 			...d,
 			...u,
@@ -2852,47 +2886,49 @@ function Cr(e) {
 }
 //#endregion
 //#region src/loginSessions/remove.ts
-function wr(e) {
+function Or(e) {
 	return async (t, n) => (await e.deleteFrom("login_sessions").where("login_sessions.tenant_id", "=", t).where("login_sessions.id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/loginSessions/index.ts
-function Tr(e) {
+function kr(e) {
 	return {
-		create: Sr(e),
-		get: hr(e),
-		update: Cr(e),
-		remove: wr(e)
+		create: Er(e),
+		get: yr(e),
+		update: Dr(e),
+		remove: Or(e)
 	};
 }
 //#endregion
 //#region src/promptSettings/get.ts
-function Er(e) {
+function Ar(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("prompt_settings").where("prompt_settings.tenant_id", "=", t).selectAll().execute();
 		return l({
 			identifier_first: !!n?.identifier_first,
 			password_first: !!n?.password_first,
 			webauthn_platform_first_factor: !!n?.webauthn_platform_first_factor,
+			show_last_used_connection: !!n?.show_last_used_connection,
 			universal_login_experience: n?.universal_login_experience || "new"
 		});
 	};
 }
 //#endregion
 //#region src/promptSettings/set.ts
-function Dr(e) {
+function jr(e) {
 	let t = {};
-	return typeof e.identifier_first == "boolean" && (t.identifier_first = +!!e.identifier_first), typeof e.password_first == "boolean" && (t.password_first = +!!e.password_first), typeof e.webauthn_platform_first_factor == "boolean" && (t.webauthn_platform_first_factor = +!!e.webauthn_platform_first_factor), e.universal_login_experience && (t.universal_login_experience = e.universal_login_experience), t;
+	return typeof e.identifier_first == "boolean" && (t.identifier_first = +!!e.identifier_first), typeof e.password_first == "boolean" && (t.password_first = +!!e.password_first), typeof e.webauthn_platform_first_factor == "boolean" && (t.webauthn_platform_first_factor = +!!e.webauthn_platform_first_factor), typeof e.show_last_used_connection == "boolean" && (t.show_last_used_connection = +!!e.show_last_used_connection), e.universal_login_experience && (t.universal_login_experience = e.universal_login_experience), t;
 }
-function Or(e) {
+function Mr(e) {
 	return async (t, n) => {
-		let r = Dr(n);
+		let r = jr(n);
 		try {
 			await e.insertInto("prompt_settings").values({
 				tenant_id: t,
 				identifier_first: r.identifier_first ?? 1,
 				password_first: r.password_first ?? 0,
 				webauthn_platform_first_factor: r.webauthn_platform_first_factor ?? 0,
+				show_last_used_connection: r.show_last_used_connection ?? 0,
 				universal_login_experience: r.universal_login_experience ?? "new"
 			}).execute();
 		} catch {
@@ -2903,15 +2939,15 @@ function Or(e) {
 }
 //#endregion
 //#region src/promptSettings/index.ts
-function kr(e) {
+function Nr(e) {
 	return {
-		get: Er(e),
-		set: Or(e)
+		get: Ar(e),
+		set: Mr(e)
 	};
 }
 //#endregion
 //#region src/emailProvideres/get.ts
-function Ar(e) {
+function Pr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("email_providers").where("email_providers.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2926,7 +2962,7 @@ function Ar(e) {
 }
 //#endregion
 //#region src/emailProvideres/update.ts
-function jr(e) {
+function Fr(e) {
 	return async (t, n) => {
 		let { credentials: r, settings: i, enabled: a, ...o } = n;
 		await e.updateTable("email_providers").set({
@@ -2939,7 +2975,7 @@ function jr(e) {
 }
 //#endregion
 //#region src/emailProvideres/create.ts
-function Mr(e) {
+function Ir(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), { credentials: o, settings: s, enabled: c, ...l } = n;
 		await e.insertInto("email_providers").values({
@@ -2955,24 +2991,24 @@ function Mr(e) {
 }
 //#endregion
 //#region src/emailProvideres/remove.ts
-function Nr(e) {
+function Lr(e) {
 	return async (t) => {
 		await e.deleteFrom("email_providers").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/emailProvideres/index.ts
-function Pr(e) {
+function Rr(e) {
 	return {
-		get: Ar(e),
-		create: Mr(e),
-		update: jr(e),
-		remove: Nr(e)
+		get: Pr(e),
+		create: Ir(e),
+		update: Fr(e),
+		remove: Lr(e)
 	};
 }
 //#endregion
 //#region src/emailTemplates/row.ts
-function Fr(e) {
+function zr(e) {
 	let t = {
 		template: e.template,
 		body: e.body,
@@ -2986,20 +3022,20 @@ function Fr(e) {
 }
 //#endregion
 //#region src/emailTemplates/get.ts
-function Ir(e) {
+function Br(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).selectAll().executeTakeFirst();
-		return r ? v.parse(Fr(r)) : null;
+		return r ? v.parse(zr(r)) : null;
 	};
 }
 //#endregion
 //#region src/emailTemplates/list.ts
-function Lr(e) {
-	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => v.parse(Fr(e)));
+function Vr(e) {
+	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => v.parse(zr(e)));
 }
 //#endregion
 //#region src/emailTemplates/create.ts
-function Rr(e) {
+function Hr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? i?.created_at ?? a;
 		return await e.insertInto("email_templates").values({
@@ -3020,7 +3056,7 @@ function Rr(e) {
 }
 //#endregion
 //#region src/emailTemplates/update.ts
-function zr(e) {
+function Ur(e) {
 	return async (t, n, r) => {
 		let i = {};
 		if (r.body !== void 0 && (i.body = r.body), r.from !== void 0 && (i.from = r.from), r.subject !== void 0 && (i.subject = r.subject), r.syntax !== void 0 && (i.syntax = r.syntax), r.resultUrl !== void 0 && (i.result_url = r.resultUrl), r.urlLifetimeInSeconds !== void 0 && (i.url_lifetime_in_seconds = r.urlLifetimeInSeconds), r.includeEmailInRedirect !== void 0 && (i.include_email_in_redirect = +!!r.includeEmailInRedirect), r.enabled !== void 0 && (i.enabled = +!!r.enabled), Object.keys(i).length === 0) return await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).select("template").executeTakeFirst() !== void 0;
@@ -3031,7 +3067,7 @@ function zr(e) {
 }
 //#endregion
 //#region src/emailTemplates/remove.ts
-function Br(e) {
+function Wr(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows ?? 0) > 0;
@@ -3039,18 +3075,18 @@ function Br(e) {
 }
 //#endregion
 //#region src/emailTemplates/index.ts
-function Vr(e) {
+function Gr(e) {
 	return {
-		get: Ir(e),
-		list: Lr(e),
-		create: Rr(e),
-		update: zr(e),
-		remove: Br(e)
+		get: Br(e),
+		list: Vr(e),
+		create: Hr(e),
+		update: Ur(e),
+		remove: Wr(e)
 	};
 }
 //#endregion
 //#region src/refreshTokens/get.ts
-function Hr(e) {
+function Kr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -3079,7 +3115,7 @@ function Hr(e) {
 }
 //#endregion
 //#region src/refreshTokens/getByLookup.ts
-function Ur(e) {
+function qr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.token_lookup", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -3108,7 +3144,7 @@ function Ur(e) {
 }
 //#endregion
 //#region src/refreshTokens/create.ts
-function Wr(e) {
+function Jr(e) {
 	return async (t, n) => {
 		let r = c(), i = {
 			...n,
@@ -3138,12 +3174,12 @@ function Wr(e) {
 }
 //#endregion
 //#region src/refreshTokens/remove.ts
-function Gr(e) {
+function Yr(e) {
 	return async (t, n) => !!(await e.deleteFrom("refresh_tokens").where("tenant_id", "=", t).where("refresh_tokens.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/refreshTokens/revokeByLoginSession.ts
-function Kr(e) {
+function Xr(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("login_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3151,7 +3187,7 @@ function Kr(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeFamily.ts
-function qr(e) {
+function Zr(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("family_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3159,7 +3195,7 @@ function qr(e) {
 }
 //#endregion
 //#region src/refreshTokens/update.ts
-function Jr(e) {
+function Qr(e) {
 	return async (t, n, r, i) => {
 		let { created_at: a, expires_at: o, idle_expires_at: c, last_exchanged_at: l, revoked_at: u, rotated_at: d, device: f, resource_servers: p, rotating: m, ...h } = r, g = {
 			...h,
@@ -3180,10 +3216,10 @@ function Jr(e) {
 }
 //#endregion
 //#region src/refreshTokens/list.ts
-function Yr(e) {
+function $r(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t);
-		l && (u = D(e, u, l, ["token", "login_id"]));
+		l && (u = O(e, u, l, ["token", "login_id"]));
 		let d = u;
 		if (c && c.sort_by) {
 			let { ref: t } = e.dynamic;
@@ -3230,24 +3266,24 @@ function Yr(e) {
 }
 //#endregion
 //#region src/refreshTokens/index.ts
-function Xr(e) {
+function ei(e) {
 	return {
-		create: Wr(e),
-		get: Hr(e),
-		getByLookup: Ur(e),
-		list: Yr(e),
-		remove: Gr(e),
-		revokeByLoginSession: Kr(e),
-		revokeFamily: qr(e),
-		update: Jr(e)
+		create: Jr(e),
+		get: Kr(e),
+		getByLookup: qr(e),
+		list: $r(e),
+		remove: Yr(e),
+		revokeByLoginSession: Xr(e),
+		revokeFamily: Zr(e),
+		update: Qr(e)
 	};
 }
 //#endregion
 //#region src/cleanup.ts
-var Zr = 10080 * 60 * 1e3;
-function Qr(e) {
+var ti = 10080 * 60 * 1e3;
+function ni(e) {
 	return async (t) => {
-		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - Zr, a = 1e3;
+		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - ti, a = 1e3;
 		try {
 			let t = 0;
 			for (;;) {
@@ -3278,7 +3314,7 @@ function Qr(e) {
 }
 //#endregion
 //#region src/forms/create.ts
-function $r(e) {
+function ri(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = x.parse({
 			id: a?.id ?? t(),
@@ -3297,10 +3333,10 @@ function $r(e) {
 }
 //#endregion
 //#region src/forms/list.ts
-function ei(e) {
+function ii(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("forms").where("tenant_id", "=", t);
-		s && (c = D(e, c, s, []));
+		s && (c = O(e, c, s, []));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let t = { ...e };
 			if (typeof t.nodes == "string") try {
@@ -3331,7 +3367,7 @@ function ei(e) {
 }
 //#endregion
 //#region src/forms/remove.ts
-function ti(e) {
+function ai(e) {
 	return async (t, n) => {
 		let { numDeletedRows: r } = await e.deleteFrom("forms").where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r > 0;
@@ -3339,7 +3375,7 @@ function ti(e) {
 }
 //#endregion
 //#region src/forms/get.ts
-function ni(e) {
+function oi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("forms").selectAll().where("forms.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
@@ -3358,7 +3394,7 @@ function ni(e) {
 }
 //#endregion
 //#region src/forms/update.ts
-function ri(e) {
+function si(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -3375,18 +3411,18 @@ function ri(e) {
 }
 //#endregion
 //#region src/forms/index.ts
-function ii(e) {
+function ci(e) {
 	return {
-		create: $r(e),
-		get: ni(e),
-		list: ei(e),
-		remove: ti(e),
-		update: ri(e)
+		create: ri(e),
+		get: oi(e),
+		list: ii(e),
+		remove: ai(e),
+		update: si(e)
 	};
 }
 //#endregion
 //#region src/resourceServers/create.ts
-function ai(e) {
+function li(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = {
 			...n,
@@ -3411,7 +3447,7 @@ function ai(e) {
 }
 //#endregion
 //#region src/resourceServers/get.ts
-function oi(e) {
+function ui(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("resource_servers").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3430,7 +3466,7 @@ function oi(e) {
 }
 //#endregion
 //#region src/resourceServers/list.ts
-function si(e) {
+function di(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", t);
 		if (s) {
@@ -3438,7 +3474,7 @@ function si(e) {
 			if (i && !o) {
 				let e = !!i[1], t = i[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
 				c = e ? c.where(t, "not like", `%${a}%`) : c.where(t, "like", `%${a}%`);
-			} else c = D(e, c, t, ["resource_servers.name", "resource_servers.identifier"]);
+			} else c = O(e, c, t, ["resource_servers.name", "resource_servers.identifier"]);
 		}
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let { verification_key: t, scopes: n, options: r, skip_consent_for_verifiable_first_party_clients: i, allow_offline_access: a, is_system: o, metadata: s, ...c } = e, u = l({
@@ -3470,7 +3506,7 @@ function si(e) {
 }
 //#endregion
 //#region src/resourceServers/remove.ts
-function ci(e) {
+function fi(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("resource_servers").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3478,7 +3514,7 @@ function ci(e) {
 }
 //#endregion
 //#region src/resourceServers/update.ts
-function li(e) {
+function pi(e) {
 	return async (t, n, r) => {
 		let { verificationKey: i, scopes: a, options: o, skip_consent_for_verifiable_first_party_clients: s, allow_offline_access: c, is_system: l, metadata: u, ...d } = r, f = {
 			...d,
@@ -3498,18 +3534,18 @@ function li(e) {
 }
 //#endregion
 //#region src/resourceServers/index.ts
-function ui(e) {
+function mi(e) {
 	return {
-		create: ai(e),
-		get: oi(e),
-		list: si(e),
-		remove: ci(e),
-		update: li(e)
+		create: li(e),
+		get: ui(e),
+		list: di(e),
+		remove: fi(e),
+		update: pi(e)
 	};
 }
 //#endregion
 //#region src/roles/create.ts
-function di(e) {
+function hi(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.created_at ?? o, c = a?.updated_at ?? o, l = a?.id || r.id || t(), { is_system: u, id: d, metadata: f, ...p } = r, m = {
 			id: l,
@@ -3532,7 +3568,7 @@ function di(e) {
 }
 //#endregion
 //#region src/roles/get.ts
-function fi(e) {
+function gi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("roles").selectAll().where("roles.tenant_id", "=", t).where("roles.id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3546,10 +3582,10 @@ function fi(e) {
 }
 //#endregion
 //#region src/roles/list.ts
-function pi(e) {
+function _i(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("roles").where("roles.tenant_id", "=", t), { page: i = 0, per_page: a = 50, include_totals: s = !1 } = n;
-		n.q && (r = D(e, r, n.q, ["name"]));
+		n.q && (r = O(e, r, n.q, ["name"]));
 		let c = (await r.offset(i * a).limit(a).selectAll().execute()).map((e) => {
 			let { is_system: t, tenant_id: n, metadata: r, ...i } = e;
 			return {
@@ -3575,7 +3611,7 @@ function pi(e) {
 }
 //#endregion
 //#region src/roles/update.ts
-function mi(e) {
+function vi(e) {
 	return async (t, n, r) => {
 		let { is_system: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -3588,7 +3624,7 @@ function mi(e) {
 }
 //#endregion
 //#region src/roles/remove.ts
-function hi(e) {
+function yi(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("roles").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3596,18 +3632,18 @@ function hi(e) {
 }
 //#endregion
 //#region src/roles/index.ts
-function gi(e) {
+function bi(e) {
 	return {
-		create: di(e),
-		get: fi(e),
-		list: pi(e),
-		update: mi(e),
-		remove: hi(e)
+		create: hi(e),
+		get: gi(e),
+		list: _i(e),
+		update: vi(e),
+		remove: yi(e)
 	};
 }
 //#endregion
 //#region src/role-permissions/assign.ts
-function _i(e) {
+function xi(e) {
 	return async (t, n, r, i) => {
 		if (r.length === 0) return !0;
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString();
@@ -3636,7 +3672,7 @@ function _i(e) {
 }
 //#endregion
 //#region src/role-permissions/remove.ts
-function vi(e) {
+function Si(e) {
 	return async (t, n, r) => {
 		if (r.length === 0) return !0;
 		try {
@@ -3648,7 +3684,7 @@ function vi(e) {
 }
 //#endregion
 //#region src/role-permissions/list.ts
-function yi(e) {
+function Ci(e) {
 	return async (t, n, r = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: o = !1 } = r, s = e.selectFrom("role_permissions").leftJoin("resource_servers", (e) => e.onRef("role_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("role_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"role_permissions.role_id",
@@ -3669,16 +3705,16 @@ function yi(e) {
 }
 //#endregion
 //#region src/role-permissions/index.ts
-function bi(e) {
+function wi(e) {
 	return {
-		assign: _i(e),
-		remove: vi(e),
-		list: yi(e)
+		assign: xi(e),
+		remove: Si(e),
+		list: Ci(e)
 	};
 }
 //#endregion
 //#region src/grants/create.ts
-function xi(e) {
+function Ti(e) {
 	return async (n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = r.scope ?? [], o = r.audience ?? "", s = await e.selectFrom("grants").where("tenant_id", "=", n).where("user_id", "=", r.user_id).where("client_id", "=", r.clientID).where("audience", "=", o).selectAll().executeTakeFirst();
 		if (s) {
@@ -3715,7 +3751,7 @@ function xi(e) {
 }
 //#endregion
 //#region src/grants/get.ts
-function Si(e) {
+function Ei(e) {
 	return async (t, n, r, i) => {
 		let a = await e.selectFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).where("client_id", "=", r).where("audience", "=", i ?? "").selectAll().executeTakeFirst();
 		return a ? {
@@ -3729,10 +3765,10 @@ function Si(e) {
 }
 //#endregion
 //#region src/grants/list.ts
-function Ci(e) {
+function Di(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("grants").where("grants.tenant_id", "=", t);
-		c && (l = D(e, l, c, [
+		c && (l = O(e, l, c, [
 			"user_id",
 			"client_id",
 			"audience"
@@ -3767,26 +3803,26 @@ function Ci(e) {
 }
 //#endregion
 //#region src/grants/remove.ts
-function wi(e) {
+function Oi(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
-function Ti(e) {
+function ki(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/grants/index.ts
-function Ei(e) {
+function Ai(e) {
 	return {
-		create: xi(e),
-		get: Si(e),
-		list: Ci(e),
-		remove: wi(e),
-		removeByUser: Ti(e)
+		create: Ti(e),
+		get: Ei(e),
+		list: Di(e),
+		remove: Oi(e),
+		removeByUser: ki(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/create.ts
-function Di(e) {
+function ji(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3806,7 +3842,7 @@ function Di(e) {
 }
 //#endregion
 //#region src/user-permissions/remove.ts
-function Oi(e) {
+function Mi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_permissions").where("tenant_id", "=", t).where("user_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name);
@@ -3818,7 +3854,7 @@ function Oi(e) {
 }
 //#endregion
 //#region src/user-permissions/list.ts
-function ki(e) {
+function Ni(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_permissions").leftJoin("resource_servers", (e) => e.onRef("user_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("user_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"user_permissions.resource_server_identifier",
@@ -3841,17 +3877,17 @@ function ki(e) {
 }
 //#endregion
 //#region src/user-permissions/index.ts
-function Ai(e) {
+function Pi(e) {
 	return {
-		create: Di(e),
-		remove: Oi(e),
-		list: ki(e)
+		create: ji(e),
+		remove: Mi(e),
+		list: Ni(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/adapter.ts
-function ji(e) {
-	let t = Ai(e);
+function Fi(e) {
+	let t = Pi(e);
 	return {
 		create: (e, n, r, i) => t.create(e, n, r, i),
 		remove: (e, n, r, i) => t.remove(e, n, r, i),
@@ -3860,7 +3896,7 @@ function ji(e) {
 }
 //#endregion
 //#region src/user-roles/list.ts
-function Mi(e) {
+function Ii(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_roles as ur").innerJoin("roles as r", (e) => e.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")).select([
 			"r.id",
@@ -3874,11 +3910,11 @@ function Mi(e) {
 }
 //#endregion
 //#region src/user-roles/list-users.ts
-function Ni(e) {
+function Li(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("user_roles").select("user_id").distinct().where("tenant_id", "=", t).where("role_id", "=", n);
-		if (M(r)) {
-			let { rows: e, limit: t, next: n } = await N(i, r, {
+		if (P(r)) {
+			let { rows: e, limit: t, next: n } = await F(i, r, {
 				sortColumn: "user_id",
 				sortOrder: "asc",
 				idColumn: "user_id"
@@ -3902,7 +3938,7 @@ function Ni(e) {
 }
 //#endregion
 //#region src/user-roles/create.ts
-function Pi(e) {
+function Ri(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3920,7 +3956,7 @@ function Pi(e) {
 }
 //#endregion
 //#region src/user-roles/remove.ts
-function Fi(e) {
+function zi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_roles").where("tenant_id", "=", t).where("user_id", "=", n).where("role_id", "=", r);
@@ -3932,18 +3968,18 @@ function Fi(e) {
 }
 //#endregion
 //#region src/user-roles/index.ts
-function Ii(e) {
+function Bi(e) {
 	return {
-		list: Mi(e),
-		listUsers: Ni(e),
-		create: Pi(e),
-		remove: Fi(e)
+		list: Ii(e),
+		listUsers: Li(e),
+		create: Ri(e),
+		remove: zi(e)
 	};
 }
 //#endregion
 //#region src/user-roles/adapter.ts
-function Li(e) {
-	let t = Ii(e);
+function Vi(e) {
+	let t = Bi(e);
 	return {
 		list: (e, n, r, i) => t.list(e, n, r, i),
 		listUsers: (e, n, r) => t.listUsers(e, n, r),
@@ -3953,7 +3989,7 @@ function Li(e) {
 }
 //#endregion
 //#region src/organizations/create.ts
-function Ri(e) {
+function Hi(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
@@ -3981,7 +4017,7 @@ function Ri(e) {
 }
 //#endregion
 //#region src/organizations/get.ts
-function zi(e) {
+function Ui(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ||= await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("name", "=", n).executeTakeFirst(), r ? l({
@@ -3996,15 +4032,15 @@ function zi(e) {
 //#endregion
 //#region src/organizations/list.ts
 var B = ["name", "display_name"];
-function Bi(e) {
+function Wi(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 		if (n?.q) {
 			let t = S(n.q, B);
-			t && (r = D(e, r, t, B));
+			t && (r = O(e, r, t, B));
 		}
-		if (M(n)) {
-			let { rows: e, limit: t, next: i } = await N(r.selectAll(), n, {
+		if (P(n)) {
+			let { rows: e, limit: t, next: i } = await F(r.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
 			}), a = e.map((e) => l({
@@ -4038,7 +4074,7 @@ function Bi(e) {
 			let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 			if (n?.q) {
 				let t = S(n.q, B);
-				t && (r = D(e, r, t, B));
+				t && (r = O(e, r, t, B));
 			}
 			let i = await r.select(f`count(*)`.as("count")).executeTakeFirst();
 			u = Number(i?.count || 0);
@@ -4061,12 +4097,12 @@ function Bi(e) {
 }
 //#endregion
 //#region src/organizations/remove.ts
-function Vi(e) {
+function Gi(e) {
 	return async (t, n) => (await e.deleteFrom("organizations").where("tenant_id", "=", t).where("id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/organizations/update.ts
-function Hi(e) {
+function Ki(e) {
 	return async (t, n, r) => {
 		let { branding: i, metadata: a, enabled_connections: o, token_quota: s, ...c } = r, l = {
 			...c,
@@ -4082,13 +4118,13 @@ function Hi(e) {
 }
 //#endregion
 //#region src/organizations/index.ts
-function Ui(e) {
+function qi(e) {
 	return {
-		create: Ri(e),
-		get: zi(e),
-		list: Bi(e),
-		remove: Vi(e),
-		update: Hi(e)
+		create: Hi(e),
+		get: Ui(e),
+		list: Wi(e),
+		remove: Gi(e),
+		update: Ki(e)
 	};
 }
 //#endregion
@@ -4114,7 +4150,7 @@ async function H(e, t, n) {
 		strategy: typeof r.strategy == "string" ? r.strategy : void 0
 	};
 }
-function Wi(e) {
+function Ji(e) {
 	return {
 		async create(t, n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -4157,7 +4193,7 @@ function Wi(e) {
 }
 //#endregion
 //#region src/user-organizations/create.ts
-function Gi(e) {
+function Yi(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			id: a?.id ?? t(),
@@ -4177,7 +4213,7 @@ function Gi(e) {
 }
 //#endregion
 //#region src/user-organizations/get.ts
-function Ki(e) {
+function Xi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("user_organizations").selectAll().where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r ? {
@@ -4191,7 +4227,7 @@ function Ki(e) {
 }
 //#endregion
 //#region src/user-organizations/list.ts
-function qi(e) {
+function Zi(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("user_organizations").selectAll().where("tenant_id", "=", t);
 		if (n?.q) {
@@ -4210,8 +4246,8 @@ function qi(e) {
 			created_at: e.created_at,
 			updated_at: e.updated_at
 		});
-		if (M(n)) {
-			let { rows: e, limit: t, next: a } = await N(r, n, {
+		if (P(n)) {
+			let { rows: e, limit: t, next: a } = await F(r, n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
 			});
@@ -4244,7 +4280,7 @@ function qi(e) {
 }
 //#endregion
 //#region src/user-organizations/listUserOrganizations.ts
-function Ji(e) {
+function Qi(e) {
 	return async (t, n, r) => {
 		let i = r?.page || 0, a = r?.per_page || 50, o = i * a, s = e.selectFrom("user_organizations").innerJoin("organizations", (e) => e.onRef("organizations.id", "=", "user_organizations.organization_id").on("organizations.tenant_id", "=", t)).select([
 			"organizations.id",
@@ -4281,12 +4317,12 @@ function Ji(e) {
 }
 //#endregion
 //#region src/user-organizations/remove.ts
-function Yi(e) {
+function $i(e) {
 	return async (t, n) => (await e.deleteFrom("user_organizations").where("id", "=", n).where("tenant_id", "=", t).execute()).length > 0;
 }
 //#endregion
 //#region src/user-organizations/update.ts
-function Xi(e) {
+function ea(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -4297,19 +4333,19 @@ function Xi(e) {
 }
 //#endregion
 //#region src/user-organizations/index.ts
-function Zi(e) {
+function ta(e) {
 	return {
-		create: Gi(e),
-		get: Ki(e),
-		list: qi(e),
-		listUserOrganizations: Ji(e),
-		remove: Yi(e),
-		update: Xi(e)
+		create: Yi(e),
+		get: Xi(e),
+		list: Zi(e),
+		listUserOrganizations: Qi(e),
+		remove: $i(e),
+		update: ea(e)
 	};
 }
 //#endregion
 //#region src/invites/create.ts
-function Qi(e) {
+function na(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = i?.id ?? n.id ?? Te(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
 			id: a,
@@ -4355,11 +4391,11 @@ function Qi(e) {
 }
 //#endregion
 //#region src/invites/get.ts
-function $i(e) {
+function ra(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("invites").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ? l({
-			...st(r, {
+			...lt(r, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4372,7 +4408,7 @@ function $i(e) {
 }
 //#endregion
 //#region src/invites/list.ts
-function ea(e) {
+function ia(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("invites").selectAll().where("tenant_id", "=", t).orderBy("created_at", "desc");
 		if (n?.per_page && (r = r.limit(n.per_page)), n?.page) {
@@ -4380,7 +4416,7 @@ function ea(e) {
 			r = r.offset(e);
 		}
 		let i = (await r.execute()).map((e) => l({
-			...st(e, {
+			...lt(e, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4399,12 +4435,12 @@ function ea(e) {
 }
 //#endregion
 //#region src/invites/remove.ts
-function ta(e) {
+function aa(e) {
 	return async (t, n) => (await e.deleteFrom("invites").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0n;
 }
 //#endregion
 //#region src/invites/update.ts
-function na(e) {
+function oa(e) {
 	return async (t, n, r) => {
 		let i = {};
 		return r.inviter !== void 0 && (i.inviter = JSON.stringify(r.inviter)), r.invitee !== void 0 && (i.invitee = JSON.stringify(r.invitee)), r.client_id !== void 0 && (i.client_id = r.client_id), r.connection_id !== void 0 && (i.connection_id = r.connection_id), r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), r.roles !== void 0 && (i.roles = JSON.stringify(r.roles)), r.ttl_sec !== void 0 && (i.ttl_sec = r.ttl_sec, i.expires_at = new Date(Date.now() + r.ttl_sec * 1e3).toISOString()), r.send_invitation_email !== void 0 && (i.send_invitation_email = +!!r.send_invitation_email), Object.keys(i).length === 0 ? !0 : (await e.updateTable("invites").set(i).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numUpdatedRows > 0n;
@@ -4412,35 +4448,35 @@ function na(e) {
 }
 //#endregion
 //#region src/invites/index.ts
-function ra(e) {
+function sa(e) {
 	return {
-		create: Qi(e),
-		get: $i(e),
-		list: ea(e),
-		remove: ta(e),
-		update: na(e)
+		create: na(e),
+		get: ra(e),
+		list: ia(e),
+		remove: aa(e),
+		update: oa(e)
 	};
 }
 //#endregion
 //#region src/stats/index.ts
-var ia = ["s"], aa = ["pwd_leak"];
-function oa(e) {
+var ca = ["s"], la = ["pwd_leak"];
+function ua(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function sa(e) {
+function da(e) {
 	return e.toISOString().split("T")[0];
 }
-function ca(e) {
+function fa(e) {
 	return {
 		async getDaily(t, n = {}) {
 			let { from: r, to: i } = n, a = /* @__PURE__ */ new Date(), o = new Date(a);
 			o.setDate(o.getDate() - 30);
-			let s = r ? oa(r) : sa(o), c = i ? oa(i) : sa(a), l = f`DATE(logs.date)`;
+			let s = r ? ua(r) : da(o), c = i ? ua(i) : da(a), l = f`DATE(logs.date)`;
 			return (await e.selectFrom("logs").where("tenant_id", "=", t).where(l, ">=", s).where(l, "<=", c).select((e) => [
 				l.as("date"),
-				e.fn.sum(e.case().when("type", "in", ia).then(1).else(0).end()).as("logins"),
+				e.fn.sum(e.case().when("type", "in", ca).then(1).else(0).end()).as("logins"),
 				e.fn.sum(e.case().when("type", "=", "ss").then(1).else(0).end()).as("signups"),
-				e.fn.sum(e.case().when("type", "in", aa).then(1).else(0).end()).as("leaked_passwords"),
+				e.fn.sum(e.case().when("type", "in", la).then(1).else(0).end()).as("leaked_passwords"),
 				e.fn.min("date").as("first_event"),
 				e.fn.max("date").as("last_event")
 			]).groupBy(l).orderBy("date", "asc").execute()).map((e) => ({
@@ -4454,13 +4490,13 @@ function ca(e) {
 		},
 		async getActiveUsers(t) {
 			let n = /* @__PURE__ */ new Date();
-			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", ia).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
+			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", ca).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
 		}
 	};
 }
 //#endregion
 //#region src/analytics/index.ts
-var la = {
+var pa = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -4490,7 +4526,7 @@ var la = {
 		"fvr"
 	],
 	"codes-sent": ["cls", "cs"]
-}, ua = {
+}, ma = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -4547,7 +4583,7 @@ var la = {
 		agg: "count"
 	}
 };
-async function da(e) {
+async function ha(e) {
 	try {
 		return await f`SELECT @@version_comment`.execute(e), "mysql";
 	} catch {
@@ -4569,7 +4605,7 @@ function U(e, t) {
 	let i = r.hour === "24" ? "00" : r.hour, a = Date.UTC(Number(r.year), Number(r.month) - 1, Number(r.day), Number(i), Number(r.minute), Number(r.second)), o = Math.round((a - t.getTime()) / 6e4), s = o >= 0 ? "+" : "-", c = Math.abs(o);
 	return `${s}${String(Math.floor(c / 60)).padStart(2, "0")}:${String(c % 60).padStart(2, "0")}`;
 }
-var fa = [
+var ga = [
 	"January",
 	"February",
 	"March",
@@ -4583,22 +4619,22 @@ var fa = [
 	"November",
 	"December"
 ];
-function pa(e, t) {
+function _a(e, t) {
 	let n = t.getUTCFullYear(), r = U(e, new Date(Date.UTC(n, 0, 1)));
 	for (let t = 1; t < 12; t++) {
 		let i = U(e, new Date(Date.UTC(n, t, 1)));
-		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${fa[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
+		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${ga[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
 	}
 }
-function ma(e) {
+function va(e) {
 	let t = e.startsWith("-") ? -1 : 1, [n, r] = e.slice(1).split(":");
 	return t * (Number(n) * 60 + Number(r));
 }
-function ha(e, t) {
+function ya(e, t) {
 	let n;
 	if (t === "+00:00") n = f`${f.ref("logs.date")}`;
 	else {
-		let e = ma(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
+		let e = va(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
 		n = f`datetime(${f.ref("logs.date")}, ${r})`;
 	}
 	switch (e) {
@@ -4609,7 +4645,7 @@ function ha(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function ga(e, t) {
+function ba(e, t) {
 	if (t === "+00:00") switch (e) {
 		case "hour": return f`substring(${f.ref("logs.date")}, 1, 13)`;
 		case "day": return f`substring(${f.ref("logs.date")}, 1, 10)`;
@@ -4620,7 +4656,7 @@ function ga(e, t) {
 		}
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
-	let n = ma(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
+	let n = va(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
 	switch (e) {
 		case "hour": return f`date_format(${r}, '%Y-%m-%dT%H')`;
 		case "day": return f`date_format(${r}, '%Y-%m-%d')`;
@@ -4629,12 +4665,12 @@ function ga(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function _a(e, t, n, r) {
-	pa(t, n);
+function xa(e, t, n, r) {
+	_a(t, n);
 	let i = U(t, n);
-	return r === "mysql" ? ga(e, i) : ha(e, i);
+	return r === "mysql" ? ba(e, i) : ya(e, i);
 }
-function va(e) {
+function Sa(e) {
 	switch (e) {
 		case "connection": return "logs.connection";
 		case "client_id": return "logs.client_id";
@@ -4643,14 +4679,14 @@ function va(e) {
 		case "time": throw Error("time dimension is handled separately");
 	}
 }
-function ya(e) {
-	let t = null, n = () => (t ||= da(e), t);
+function Ca(e) {
+	let t = null, n = () => (t ||= ha(e), t);
 	return { async query(t, r, i) {
-		let a = Date.now(), o = la[r], s = ua[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
+		let a = Date.now(), o = pa[r], s = ma[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
 		u = u.where("date", ">=", i.from).where("date", "<", i.to), u = u.where("type", "in", o), i.filters.connection?.length && (u = u.where("connection", "in", i.filters.connection)), i.filters.client_id?.length && (u = u.where("client_id", "in", i.filters.client_id)), i.filters.user_type?.length && (u = u.where("strategy_type", "in", i.filters.user_type)), i.filters.user_id?.length && (u = u.where("user_id", "in", i.filters.user_id));
 		let d = [], p = [];
 		for (let e of i.group_by) if (e === "time") {
-			let e = _a(i.interval, i.tz, new Date(i.from), c);
+			let e = xa(i.interval, i.tz, new Date(i.from), c);
 			p.push({
 				alias: "time",
 				expr: e
@@ -4659,7 +4695,7 @@ function ya(e) {
 				type: i.interval === "hour" ? "DateTime" : "Date"
 			});
 		} else {
-			let t = va(e);
+			let t = Sa(e);
 			p.push({
 				alias: e,
 				expr: f`${f.ref(t)}`
@@ -4701,7 +4737,7 @@ function ya(e) {
 }
 //#endregion
 //#region src/customText/index.ts
-function ba(e) {
+function wa(e) {
 	return {
 		async get(t, n, r) {
 			let i = await e.selectFrom("custom_text").selectAll().where("tenant_id", "=", t).where("prompt", "=", n).where("language", "=", r).executeTakeFirst();
@@ -4740,9 +4776,9 @@ function ba(e) {
 }
 //#endregion
 //#region src/authenticationMethods/create.ts
-function xa(e) {
+function Ta(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? xr();
+		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? Tr();
 		return await e.insertInto("authentication_methods").values({
 			id: s,
 			tenant_id: t,
@@ -4779,7 +4815,7 @@ function xa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/get.ts
-function Sa(e) {
+function Ea(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4802,7 +4838,7 @@ function Sa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/getByCredentialId.ts
-function Ca(e) {
+function Da(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.credential_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4825,7 +4861,7 @@ function Ca(e) {
 }
 //#endregion
 //#region src/authenticationMethods/list.ts
-function wa(e) {
+function Oa(e) {
 	return async (t, n) => (await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "=", n).selectAll().execute()).map((e) => ({
 		id: e.id,
 		user_id: e.user_id,
@@ -4845,35 +4881,35 @@ function wa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/update.ts
-function Ta(e) {
+function ka(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		r.phone_number !== void 0 && (i.phone_number = r.phone_number), r.totp_secret !== void 0 && (i.totp_secret = r.totp_secret), r.credential_id !== void 0 && (i.credential_id = r.credential_id), r.public_key !== void 0 && (i.public_key = r.public_key), r.sign_count !== void 0 && (i.sign_count = r.sign_count), r.credential_backed_up !== void 0 && (i.credential_backed_up = +!!r.credential_backed_up), r.transports !== void 0 && (i.transports = JSON.stringify(r.transports)), r.friendly_name !== void 0 && (i.friendly_name = r.friendly_name), r.confirmed !== void 0 && (i.confirmed = +!!r.confirmed), await e.updateTable("authentication_methods").set(i).where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).execute();
-		let a = await Sa(e)(t, n);
+		let a = await Ea(e)(t, n);
 		if (!a) throw Error(`Authentication method ${n} not found`);
 		return a;
 	};
 }
 //#endregion
 //#region src/authenticationMethods/remove.ts
-function Ea(e) {
+function Aa(e) {
 	return async (t, n) => (await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/authenticationMethods/index.ts
-function Da(e) {
+function ja(e) {
 	return {
-		create: xa(e),
-		get: Sa(e),
-		getByCredentialId: Ca(e),
-		list: wa(e),
-		update: Ta(e),
-		remove: Ea(e)
+		create: Ta(e),
+		get: Ea(e),
+		getByCredentialId: Da(e),
+		list: Oa(e),
+		update: ka(e),
+		remove: Aa(e)
 	};
 }
 //#endregion
 //#region src/outbox/getByIds.ts
-function Oa(e) {
+function Ma(e) {
 	return async (t) => t.length === 0 ? [] : (await e.selectFrom("outbox_events").selectAll().where("id", "in", t).execute()).map((e) => ({
 		...JSON.parse(e.payload),
 		id: e.id,
@@ -4886,7 +4922,7 @@ function Oa(e) {
 }
 //#endregion
 //#region src/outbox/getUnprocessed.ts
-function ka(e) {
+function Na(e) {
 	return async (t) => {
 		let n = (/* @__PURE__ */ new Date()).toISOString();
 		return (await e.selectFrom("outbox_events").selectAll().where("processed_at", "is", null).where((e) => e.or([e("next_retry_at", "is", null), e("next_retry_at", "<=", n)])).where((e) => e.or([e("claimed_by", "is", null), e("claim_expires_at", "<=", n)])).orderBy("created_at", "asc").orderBy("id", "asc").limit(t).execute()).map((e) => ({
@@ -4902,7 +4938,7 @@ function ka(e) {
 }
 //#endregion
 //#region src/outbox/claimEvents.ts
-function Aa(e) {
+function Pa(e) {
 	return async (t, n, r) => {
 		if (t.length === 0) return [];
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = new Date(Date.now() + r).toISOString();
@@ -4914,7 +4950,7 @@ function Aa(e) {
 }
 //#endregion
 //#region src/outbox/markProcessed.ts
-function ja(e) {
+function Fa(e) {
 	return async (t) => {
 		if (t.length === 0) return;
 		let n = (/* @__PURE__ */ new Date()).toISOString();
@@ -4923,7 +4959,7 @@ function ja(e) {
 }
 //#endregion
 //#region src/outbox/markRetry.ts
-function Ma(e) {
+function Ia(e) {
 	return async (t, n, r) => {
 		await e.updateTable("outbox_events").set({
 			error: n,
@@ -4936,7 +4972,7 @@ function Ma(e) {
 }
 //#endregion
 //#region src/outbox/deadLetter.ts
-function Na(e) {
+function La(e) {
 	return async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString();
 		await e.updateTable("outbox_events").set({
@@ -4948,7 +4984,7 @@ function Na(e) {
 }
 //#endregion
 //#region src/outbox/listFailed.ts
-function Pa(e) {
+function Ra(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1 } = n, o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap((e) => {
 			let t;
@@ -4983,7 +5019,7 @@ function Pa(e) {
 }
 //#endregion
 //#region src/outbox/replay.ts
-function Fa(e) {
+function za(e) {
 	return async (t, n) => {
 		let r = await e.updateTable("outbox_events").set({
 			processed_at: null,
@@ -4998,7 +5034,7 @@ function Fa(e) {
 }
 //#endregion
 //#region src/outbox/cleanup.ts
-function Ia(e) {
+function Ba(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5006,18 +5042,18 @@ function Ia(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function La(e) {
+function Va(e) {
 	return {
-		create: Be(e),
-		getByIds: Oa(e),
-		getUnprocessed: ka(e),
-		claimEvents: Aa(e),
-		markProcessed: ja(e),
-		markRetry: Ma(e),
-		deadLetter: Na(e),
-		listFailed: Pa(e),
-		replay: Fa(e),
-		cleanup: Ia(e)
+		create: He(e),
+		getByIds: Ma(e),
+		getUnprocessed: Na(e),
+		claimEvents: Pa(e),
+		markProcessed: Fa(e),
+		markRetry: Ia(e),
+		deadLetter: La(e),
+		listFailed: Ra(e),
+		replay: za(e),
+		cleanup: Ba(e)
 	};
 }
 //#endregion
@@ -5035,7 +5071,7 @@ function W(e) {
 		updated_at: e.updated_at
 	};
 }
-function Ra(e) {
+function Ha(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5082,7 +5118,7 @@ function G(e) {
 		updated_at: e.updated_at
 	};
 }
-function za(e) {
+function Ua(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5122,13 +5158,13 @@ function K(e) {
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: Ba(e.match),
-		handlers: Va(e.handlers),
+		match: Wa(e.match),
+		handlers: Ga(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function Ba(e) {
+function Wa(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = re.safeParse(t);
@@ -5136,7 +5172,7 @@ function Ba(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function Va(e) {
+function Ga(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5206,7 +5242,7 @@ function q(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function Ha(e, t) {
+async function Ka(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5223,16 +5259,179 @@ async function Ha(e, t) {
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function Ua(e) {
+function qa(e) {
 	return {
 		proxyRoutes: q(e),
-		resolveHost: (t) => Ha(e, t)
+		resolveHost: (t) => Ka(e, t)
 	};
 }
 //#endregion
-//#region src/tenantOperations/index.ts
+//#region src/scim/adapter.ts
+function Ja(e) {
+	if (!e) return [];
+	try {
+		let t = JSON.parse(e);
+		if (!Array.isArray(t)) return [];
+		let n = [];
+		for (let e of t) {
+			let t = le.safeParse(e);
+			t.success && n.push(t.data);
+		}
+		return n;
+	} catch {
+		return [];
+	}
+}
+function Ya(e) {
+	if (!e) return [];
+	try {
+		let t = JSON.parse(e);
+		return Array.isArray(t) ? t.filter((e) => typeof e == "string") : [];
+	} catch {
+		return [];
+	}
+}
+function Xa(e) {
+	return {
+		connection_id: e.connection_id,
+		user_id_attribute: e.user_id_attribute,
+		mapping: Ja(e.mapping),
+		created_at: e.created_at,
+		updated_at: e.updated_at
+	};
+}
+function Za(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString();
+			return await e.insertInto("scim_configurations").values({
+				connection_id: n.connection_id,
+				tenant_id: t,
+				user_id_attribute: n.user_id_attribute,
+				mapping: JSON.stringify(n.mapping),
+				created_at: r,
+				updated_at: r
+			}).execute(), {
+				connection_id: n.connection_id,
+				user_id_attribute: n.user_id_attribute,
+				mapping: n.mapping,
+				created_at: r,
+				updated_at: r
+			};
+		},
+		async get(t, n) {
+			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
+			return r ? Xa(r) : null;
+		},
+		async update(t, n, r) {
+			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			r.user_id_attribute !== void 0 && (i.user_id_attribute = r.user_id_attribute), r.mapping !== void 0 && (i.mapping = JSON.stringify(r.mapping));
+			let a = await e.updateTable("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).set(i).executeTakeFirst();
+			return Number(a.numUpdatedRows) > 0;
+		},
+		async remove(t, n) {
+			let r = await e.deleteFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).executeTakeFirst();
+			return Number(r.numDeletedRows) > 0;
+		}
+	};
+}
 function J(e) {
-	return fe.parse({
+	return {
+		token_id: e.token_id,
+		connection_id: e.connection_id,
+		token_hash: e.token_hash,
+		scopes: Ya(e.scopes),
+		valid_until: e.valid_until ?? void 0,
+		created_at: e.created_at,
+		last_used_at: e.last_used_at ?? void 0
+	};
+}
+function Qa(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString();
+			return await e.insertInto("scim_tokens").values({
+				token_id: n.token_id,
+				tenant_id: t,
+				connection_id: n.connection_id,
+				token_hash: n.token_hash,
+				scopes: JSON.stringify(n.scopes),
+				valid_until: n.valid_until ?? null,
+				created_at: r,
+				last_used_at: null
+			}).execute(), {
+				token_id: n.token_id,
+				connection_id: n.connection_id,
+				token_hash: n.token_hash,
+				scopes: n.scopes,
+				valid_until: n.valid_until,
+				created_at: r
+			};
+		},
+		async get(t, n) {
+			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
+			return r ? J(r) : null;
+		},
+		async getByHash(t, n) {
+			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
+			return r ? J(r) : null;
+		},
+		async listByConnection(t, n) {
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(J);
+		},
+		async markUsed(t, n, r) {
+			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
+			return Number(i.numUpdatedRows) > 0;
+		},
+		async remove(t, n) {
+			let r = await e.deleteFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).executeTakeFirst();
+			return Number(r.numDeletedRows) > 0;
+		}
+	};
+}
+function $a(e) {
+	return {
+		connection_id: e.connection_id,
+		external_id: e.external_id,
+		user_id: e.user_id,
+		created_at: e.created_at
+	};
+}
+function eo(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString();
+			return await e.insertInto("scim_external_ids").values({
+				tenant_id: t,
+				connection_id: n.connection_id,
+				external_id: n.external_id,
+				user_id: n.user_id,
+				created_at: r
+			}).execute(), {
+				connection_id: n.connection_id,
+				external_id: n.external_id,
+				user_id: n.user_id,
+				created_at: r
+			};
+		},
+		async getByExternalId(t, n, r) {
+			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
+			return i ? $a(i) : null;
+		},
+		async getByUserId(t, n, r) {
+			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
+			return i ? $a(i) : null;
+		},
+		async remove(t, n, r) {
+			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
+			return Number(i.numDeletedRows) > 0;
+		}
+	};
+}
+//#endregion
+//#region src/tenantOperations/index.ts
+function Y(e) {
+	return pe.parse({
 		id: e.id,
 		tenant_id: e.tenant_id,
 		rollout_id: e.rollout_id,
@@ -5250,10 +5449,10 @@ function J(e) {
 		finished_at: e.finished_at
 	});
 }
-function Wa(e) {
+function to(e) {
 	return {
 		async create(n) {
-			let r = de.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
+			let r = fe.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
 				id: `op_${t()}`,
 				tenant_id: r.tenant_id,
 				rollout_id: r.rollout_id ?? null,
@@ -5270,11 +5469,11 @@ function Wa(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("tenant_operations").values(a).execute(), J(a);
+			return await e.insertInto("tenant_operations").values(a).execute(), Y(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("tenant_operations").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? J(n) : null;
+			return n ? Y(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = e.selectFrom("tenant_operations");
@@ -5285,7 +5484,7 @@ function Wa(e) {
 			t.engine !== void 0 && (i = i.where("engine", "=", t.engine)), t.updated_before !== void 0 && (i = i.where("updated_at", "<", t.updated_before));
 			let a = await i.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				operations: a.map(J),
+				operations: a.map(Y),
 				start: n * r,
 				limit: r,
 				length: a.length
@@ -5305,27 +5504,27 @@ function Wa(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var Ga = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Y = 32, Ka = 10, qa = 4, Ja = 10;
-function Ya(e, t) {
+var no = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", X = 32, ro = 10, io = 4, ao = 10;
+function oo(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = Ga.charAt(e % Y) + n, e = Math.floor(e / Y);
+	for (let r = t; r > 0; r--) n = no.charAt(e % X) + n, e = Math.floor(e / X);
 	return n;
 }
-function Xa() {
-	let e = new Uint8Array(Ja);
+function so() {
+	let e = new Uint8Array(ao);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < Ja; n++) t += Ga.charAt(e[n] % Y);
+	for (let n = 0; n < ao; n++) t += no.charAt(e[n] % X);
 	return t;
 }
-var Za = 0, X = 0;
-function Qa() {
+var co = 0, Z = 0;
+function lo() {
 	let e = Date.now();
-	return e === Za ? X++ : (Za = e, X = 0), Ya(e, Ka) + Ya(X, qa) + Xa();
+	return e === co ? Z++ : (co = e, Z = 0), oo(e, ro) + oo(Z, io) + so();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function $a(e) {
+function uo(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5333,22 +5532,22 @@ function $a(e) {
 	} catch {}
 	return null;
 }
-function eo(e) {
-	return ue.parse({
+function fo(e) {
+	return de.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: $a(e.detail),
+		detail: uo(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function to(e) {
+function po(e) {
 	return {
 		async create(t) {
-			let n = le.parse(t), r = {
-				id: `evt_${Qa()}`,
+			let n = ue.parse(t), r = {
+				id: `evt_${lo()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5356,12 +5555,12 @@ function to(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), eo(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), fo(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(eo),
+				events: a.map(fo),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -5371,7 +5570,7 @@ function to(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function no(e) {
+function mo(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5379,7 +5578,7 @@ function no(e) {
 		return null;
 	}
 }
-function Z(e) {
+function ho(e) {
 	return ce.parse({
 		id: e.id,
 		kind: e.kind,
@@ -5387,15 +5586,15 @@ function Z(e) {
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: no(e.canary_tenant_ids),
-		filter: no(e.filter),
+		canary_tenant_ids: mo(e.canary_tenant_ids),
+		filter: mo(e.filter),
 		initiated_by: e.initiated_by,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function ro(e) {
+function go(e) {
 	return {
 		async create(n) {
 			let r = se.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -5412,16 +5611,16 @@ function ro(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("rollouts").values(a).execute(), Z(a);
+			return await e.insertInto("rollouts").values(a).execute(), ho(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("rollouts").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? Z(n) : null;
+			return n ? ho(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = await e.selectFrom("rollouts").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: i.map(Z),
+				rollouts: i.map(ho),
 				start: n * r,
 				limit: r,
 				length: i.length
@@ -5441,7 +5640,7 @@ function ro(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var io = class {
+var _o = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -5449,10 +5648,10 @@ var io = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, ao = /* @__PURE__ */ he({
-	down: () => lo,
-	up: () => co
-}), oo = [
+}, vo = /* @__PURE__ */ w({
+	down: () => So,
+	up: () => xo
+}), yo = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -5718,7 +5917,7 @@ var io = class {
 		onDelete: "cascade"
 	}
 ];
-async function so(e) {
+async function bo(e) {
 	try {
 		return await f`select sqlite_version()`.execute(e), !0;
 	} catch {
@@ -5727,14 +5926,14 @@ async function so(e) {
 }
 function Q(e, t) {
 	let n = e;
-	for (let e of oo) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of yo) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function co(e) {
-	let t = await so(e);
+async function xo(e) {
+	let t = await bo(e);
 	await e.schema.createTable("tenants").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("audience", f`varchar(255)`).addColumn("sender_email", f`varchar(255)`).addColumn("sender_name", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addColumn("support_url", f`varchar(255)`).addColumn("idle_session_lifetime", f`int`).addColumn("session_lifetime", f`int`).addColumn("session_cookie", f`text`).addColumn("allowed_logout_urls", f`text`).addColumn("ephemeral_session_lifetime", f`int`).addColumn("idle_ephemeral_session_lifetime", f`int`).addColumn("default_redirection_uri", f`text`).addColumn("enabled_locales", f`text`).addColumn("default_directory", f`varchar(255)`).addColumn("error_page", f`text`).addColumn("flags", f`text`).addColumn("friendly_name", f`varchar(255)`).addColumn("picture_url", f`text`).addColumn("support_email", f`varchar(255)`).addColumn("sandbox_version", f`varchar(50)`).addColumn("sandbox_versions_available", f`text`).addColumn("legacy_sandbox_version", f`varchar(50)`).addColumn("change_password", f`text`).addColumn("guardian_mfa_page", f`text`).addColumn("device_flow", f`text`).addColumn("default_token_quota", f`text`).addColumn("default_audience", f`varchar(255)`).addColumn("default_organization", f`varchar(255)`).addColumn("sessions", f`text`).addColumn("oidc_logout", f`text`).addColumn("allow_organization_name_in_authentication_api", f`int`).addColumn("customize_mfa_in_postlogin_action", f`int`).addColumn("acr_values_supported", f`text`).addColumn("mtls", f`text`).addColumn("pushed_authorization_requests_supported", f`int`).addColumn("authorization_response_iss_parameter_supported", f`int`).addColumn("mfa", f`text`).addColumn("attack_protection", f`text`).addColumn("default_client_id", f`varchar(255)`).addColumn("deployment_type", f`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", f`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", f`varchar(2048)`).addColumn("provisioning_state_changed_at", f`varchar(35)`).addColumn("bundle_configuration", f`varchar(64)`).addColumn("worker_version", f`varchar(64)`).addColumn("worker_script_name", f`varchar(255)`).addColumn("storage_kind", f`varchar(32)`).addColumn("d1_database_id", f`varchar(64)`).addColumn("database_version", f`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", f`varchar(64)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("results", f`text`, (e) => e.notNull()).addColumn("logs", f`text`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("action_id", f`varchar(255)`, (e) => e.notNull()).addColumn("number", f`int`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("status", f`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed_at_ts", f`bigint`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("type", f`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", f`varchar(32)`).addColumn("totp_secret", f`varchar(255)`).addColumn("confirmed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("credential_id", f`varchar(512)`).addColumn("public_key", f`text`).addColumn("sign_count", f`int`).addColumn("credential_backed_up", f`int`).addColumn("transports", f`varchar(512)`).addColumn("friendly_name", f`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
@@ -5921,40 +6120,40 @@ async function co(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of oo) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of yo) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function lo(e) {
+async function So(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var uo = !1;
-function fo(e) {
-	uo = e;
+var Co = !1;
+function wo(e) {
+	Co = e;
 }
 function $(...e) {
-	uo && console.log(...e);
+	Co && console.log(...e);
 }
-function po(...e) {
+function To(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var mo = /* @__PURE__ */ he({
-	down: () => To,
-	up: () => So
-}), ho = 5e4, go = 500;
-async function _o(e) {
+var Eo = /* @__PURE__ */ w({
+	down: () => Lo,
+	up: () => Po
+}), Do = 5e4, Oo = 500;
+async function ko(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function vo(e, t, n) {
+async function Ao(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
@@ -5965,7 +6164,7 @@ async function vo(e, t, n) {
 		throw e;
 	}
 }
-async function yo(e, t, n, r) {
+async function jo(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -5976,21 +6175,21 @@ async function yo(e, t, n, r) {
 		throw e;
 	}
 }
-async function bo(e, t) {
+async function Mo(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
 		r = Number(t.numDeletedRows);
 	} else {
-		let t = ho;
-		for (; t >= ho;) {
-			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(ho).executeTakeFirst();
+		let t = Do;
+		for (; t >= Do;) {
+			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(Do).executeTakeFirst();
 			t = Number(i.numDeletedRows), r += t, t > 0 && $(`  Pruned ${r} expired codes row(s)...`);
 		}
 	}
 	return r;
 }
-async function xo(e) {
+async function No(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -5998,33 +6197,33 @@ async function xo(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(go).execute();
+		]).where("expires_at_ts", "is", null).limit(Oo).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < go) break;
+		if (t += n.length, n.length < Oo) break;
 	}
 	return t;
 }
-async function So(e) {
-	let t = await _o(e);
+async function Po(e) {
+	let t = await ko(e);
 	try {
-		let n = await bo(e, t);
+		let n = await Mo(e, t);
 		$(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
-		po(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
+		To(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await vo(e, "codes", "expires_at_ts"), await yo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await Ao(e, "codes", "expires_at_ts"), await jo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await xo(e);
+		let t = await No(e);
 		$(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
-		po(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
+		To(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function Co(e, t, n) {
+async function Fo(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -6032,7 +6231,83 @@ async function Co(e, t, n) {
 		throw e;
 	}
 }
-async function wo(e, t, n) {
+async function Io(e, t, n) {
+	try {
+		await e.schema.alterTable(t).dropColumn(n).execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function Lo(e) {
+	await Fo(e, "idx_codes_expires_at_ts", "codes"), await Io(e, "codes", "expires_at_ts");
+}
+//#endregion
+//#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
+var Ro = /* @__PURE__ */ w({
+	down: () => Bo,
+	up: () => zo
+});
+async function zo(e) {
+	await e.schema.createTable("scim_configurations").addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", f`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", f`varchar(128)`, (e) => e.notNull()).addColumn("scopes", f`text`, (e) => e.notNull()).addColumn("valid_until", f`varchar(35)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", f`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("external_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
+		"tenant_id",
+		"connection_id",
+		"user_id"
+	]).execute(), await e.schema.createIndex("scim_external_ids_connection_external_idx").on("scim_external_ids").columns([
+		"tenant_id",
+		"connection_id",
+		"external_id"
+	]).unique().execute();
+}
+async function Bo(e) {
+	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
+}
+//#endregion
+//#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
+var Vo = /* @__PURE__ */ w({
+	down: () => Go,
+	up: () => Uo
+});
+async function Ho(e, t, n) {
+	try {
+		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function Uo(e) {
+	await Ho(e, "users", "blocked");
+}
+async function Wo(e, t, n) {
+	try {
+		await e.schema.alterTable(t).dropColumn(n).execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function Go(e) {
+	await Wo(e, "users", "blocked");
+}
+//#endregion
+//#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
+var Ko = /* @__PURE__ */ w({
+	down: () => Xo,
+	up: () => Jo
+});
+async function qo(e, t, n) {
+	try {
+		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function Jo(e) {
+	await qo(e, "prompt_settings", "show_last_used_connection");
+}
+async function Yo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6040,32 +6315,64 @@ async function wo(e, t, n) {
 		throw e;
 	}
 }
-async function To(e) {
-	await Co(e, "idx_codes_expires_at_ts", "codes"), await wo(e, "codes", "expires_at_ts");
+async function Xo(e) {
+	await Yo(e, "prompt_settings", "show_last_used_connection");
+}
+//#endregion
+//#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
+var Zo = /* @__PURE__ */ w({
+	down: () => es,
+	up: () => $o
+});
+async function Qo(e, t, n, r) {
+	try {
+		await e.schema.createIndex(t).on(n).column(r).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1061") || e.message.toLowerCase().includes("already exists"))) {
+			$(`  Index ${t} already exists, skipping`);
+			return;
+		}
+		throw e;
+	}
+}
+async function $o(e) {
+	await Qo(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+}
+async function es(e) {
+	try {
+		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
 }
 //#endregion
 //#region migrate/migrations/index.ts
-var Eo = {
-	"2026-07-16T14:00:00_baseline": ao,
-	"2026-07-16T15:00:00_codes_expires_at_ts": mo
+var ts = {
+	"2026-07-16T14:00:00_baseline": vo,
+	"2026-07-16T15:00:00_codes_expires_at_ts": Eo,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": Ro,
+	"2026-08-05T12:00:00_user_blocked": Vo,
+	"2026-08-09T12:00:00_prompt_settings_last_used": Ko,
+	"2026-08-10T12:00:00_action_executions_created_at_index": Zo
 };
 //#endregion
 //#region migrate/migrate.ts
-async function Do(e, t = !1) {
-	fo(t), t && console.log("migrating...");
-	let { error: n, results: r } = await new pe({
+async function ns(e, t = !1) {
+	wo(t), t && console.log("migrating...");
+	let { error: n, results: r } = await new me({
 		db: e,
-		provider: new io(Eo)
+		provider: new _o(ts)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function Oo(e, t = !1) {
-	fo(t), t && console.log("migrating...");
-	let { error: n, results: r } = await new pe({
+async function rs(e, t = !1) {
+	wo(t), t && console.log("migrating...");
+	let { error: n, results: r } = await new me({
 		db: e,
-		provider: new io(Eo)
+		provider: new _o(ts)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -6073,61 +6380,64 @@ async function Oo(e, t = !1) {
 }
 //#endregion
 //#region src/index.ts
-function ko(e, t = { useTransactions: !0 }) {
+function is(e, t = { useTransactions: !0 }) {
 	let n = {
 		actions: Ne(e),
-		actionExecutions: Le(e),
-		actionVersions: ze(e),
-		branding: Jn(e),
-		clients: un(e),
-		clientConnections: gn(e),
-		clientGrants: Cn(e),
-		clientRegistrationTokens: Pn(e),
-		codes: Jt(e),
-		connections: tn(e),
-		emailProviders: Pr(e),
-		emailTemplates: Vr(e),
-		customDomains: Gn(e),
-		flows: ft(e),
-		forms: ii(e),
-		hookCode: lr(e),
-		hooks: ir(e),
-		invites: ra(e),
-		keys: Rn(e),
-		loginSessions: Tr(e),
-		logs: Ot(e),
-		logStreams: Ra(e),
-		migrationSources: za(e),
-		authenticationMethods: Da(e),
-		passwords: zt(e),
-		promptSettings: kr(e),
+		actionExecutions: ze(e),
+		actionVersions: Ve(e),
+		branding: Qn(e),
+		clients: mn(e),
+		clientConnections: bn(e),
+		clientGrants: Dn(e),
+		clientRegistrationTokens: Rn(e),
+		codes: Zt(e),
+		connections: on(e),
+		emailProviders: Rr(e),
+		emailTemplates: Gr(e),
+		customDomains: Yn(e),
+		flows: mt(e),
+		forms: ci(e),
+		hookCode: pr(e),
+		hooks: cr(e),
+		invites: sa(e),
+		keys: Hn(e),
+		loginSessions: kr(e),
+		logs: jt(e),
+		logStreams: Ha(e),
+		migrationSources: Ua(e),
+		authenticationMethods: ja(e),
+		passwords: Ht(e),
+		promptSettings: Nr(e),
 		proxyRoutes: q(e),
-		refreshTokens: Xr(e),
-		resourceServers: ui(e),
-		rolePermissions: bi(e),
-		grants: Ei(e),
-		userPermissions: ji(e),
-		userRoles: Li(e),
-		roles: gi(e),
-		sessions: Pt(e),
-		sessionCleanup: Qr(e),
-		tenants: bt(e),
-		tenantOperations: Wa(e),
-		tenantOperationEvents: to(e),
-		rollouts: ro(e),
-		themes: mr(e),
-		universalLoginTemplates: Qn(e),
-		customText: ba(e),
-		users: it(e),
-		userActivity: tt(e),
-		organizations: Ui(e),
-		organizationConnections: Wi(e),
-		userOrganizations: Zi(e),
-		stats: ca(e),
-		analytics: ya(e),
-		outbox: La(e),
+		scimConfigurations: Za(e),
+		scimTokens: Qa(e),
+		scimExternalIds: eo(e),
+		refreshTokens: ei(e),
+		resourceServers: mi(e),
+		rolePermissions: wi(e),
+		grants: Ai(e),
+		userPermissions: Fi(e),
+		userRoles: Vi(e),
+		roles: bi(e),
+		sessions: Lt(e),
+		sessionCleanup: ni(e),
+		tenants: St(e),
+		tenantOperations: to(e),
+		tenantOperationEvents: po(e),
+		rollouts: go(e),
+		themes: vr(e),
+		universalLoginTemplates: nr(e),
+		customText: wa(e),
+		users: ot(e),
+		userActivity: rt(e),
+		organizations: qi(e),
+		organizationConnections: Ji(e),
+		userOrganizations: ta(e),
+		stats: fa(e),
+		analytics: Ca(e),
+		outbox: Va(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(ko(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(is(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -6136,4 +6446,4 @@ function ko(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { Ua as createProxyDataAdapter, q as createProxyRoutesAdapter, ko as default, Oo as migrateDown, Do as migrateToLatest };
+export { qa as createProxyDataAdapter, q as createProxyRoutesAdapter, is as default, rs as migrateDown, ns as migrateToLatest };